similar to: Security leak in map_nt_perms?

Hi, I run Samba 2.2.3a (Solaris 7) in domain authentication mode in a Windows 2000 domain. I would like to be able to script file permissions changes from the Windows side using a command line utility, e.g. cacls, however I have only been successful in changing the UNIX world permisssions, not owner and group. A summary follows. Has anyone come across a solution for this? Thanks, Fintan ---

Recently, a problem developed in storing IE5's Temporary Internet Files on our samba exported network scratch space. In tracking it down, I found that the Win2k client attempts to set the ACL of the file "Content.IE5/index.dat". However, the this call ends up setting the mode of index.dat to 0407 (-r-----rwx), thus making the file unmodifiable to the user who created it. (This in

I need help interpeting this issue, thanks in advance. A file was created by user nli on windows 7, that user can manipulate the file at will. If user jpyeron tries to manipulate the file on XPx64 the below happens. # smbd -V Version 3.0.33-3.40.el5_10 [2015/02/02 18:34:15, 8] smbd/dosmode.c:dos_mode_from_sbuf(188) dos_mode_from_sbuf returning [2015/02/02 18:34:15, 8]

Hi folks, I''ve got most everything done for the pure Ruby version of win32-file. The last thing left (since I''ll be moving the IO methods to a different package eventually) is the file security stuff. Here''s what I''ve got so far for the get_permissions method. However, I''m stuck at GetAce(). If someone could help me finish up this method, I

Abramo, it must be the query for llvmdev, not for cfe-dev. 2011/7/28 Abramo Bagnara <abramo.bagnara at gmail.com>: > ../llvm-r136065/configure --host=i586-mingw32msvc > --enable-targets=host-only --disable-jit --enable-bindings=none > --enable-shared --disable-threads --disable-pthreads > --disable-assertions --disable-optimized I added --enable-shared for cygming a year ago.

Il 02/08/2011 13:02, NAKAMURA Takumi ha scritto: > Abramo, it must be the query for llvmdev, not for cfe-dev. > > 2011/7/28 Abramo Bagnara <abramo.bagnara at gmail.com>: >> ../llvm-r136065/configure --host=i586-mingw32msvc >> --enable-targets=host-only --disable-jit --enable-bindings=none >> --enable-shared --disable-threads --disable-pthreads >>

Two attached patches for samba 2.2.7a and 3.0-alfa22, that I've made today, fix 3 bugs mentioned in my previous e-mail. 1) For each file in addition to ALLOW ACE proper DENY ACE is created. 2) "Take ownership" is shown DENIED for all except root ACEs 3) Read Permissions and read attributes are always shown as allowed, as they are actually allowed. -- Zhitomirsky

Hi all, First, I just realized I''ll need to go back and fix some of the prototype declarations for windows-pr. The callback parameters will now need to be set to ''K''. ReadFileEx is one example of this. For purposes of my question, let''s assume ReadFileEx has been declared like so: API.new(''ReadFileEx'', ''LPLPK'',

This question isn't directly Samba related, but Samba has helped me figure out part of the problem. When I CreateFile on an existing file like so: CreateFile(FileName, GENERIC_READ, FILE_SHARE_READ | FILE_SHARE_DELETE, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL); Samba shows that I have the file opened with this type of lock DENY_NONE 0x20089 RDONLY When the file is locked in

Server - Samba 3.0.20 on INTEL P4 running Slackware 10.1 Client - Windows 98. Can log in, see, browse, and write. Just can't run simultaneous, same *.exe from 2 different computers with Windows 98 With Windows 2000, Xp this keep good time. On samba 3.0.14a, with same smb.conf this problem dont exist.

Release Announcements --------------------- These are a security releases in order to address the following defects: o CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify. o CVE-2020-14323: Unprivileged user can crash winbind. o CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records. ======= Details ======= o CVE-2020-14318:

Release Announcements --------------------- These are a security releases in order to address the following defects: o CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify. o CVE-2020-14323: Unprivileged user can crash winbind. o CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records. ======= Details ======= o CVE-2020-14318:

Hi all, Anyone want to help with a native IO.foreach? I''m missing some of the critical logic here. This currently just does a straight BYTE_MAX data read, instead of a line by line data read, and doesn''t deal with lines split between multiple reads. I checked strtok into CVS (for windows-pr) if anyone wants to use that instead of String#split. It''s in

> I've now managed to replicate the error on my test setup. I added a > third host and all hell broke loose - no locking at all when opening > Excel files apart from same-host. It seemed fine with two. > > I then downgraded to 4.4.5 and the problem persisted. So it cannot be > a regression from that patch. > > Regards, > > Alex > Here you go: Locked files:

Hi all, Thanks to Wayne and Park, I''ve got something like this now: static VALUE file_set_compressed(VALUE self, VALUE rbBool){ HANDLE h; BOOL rv; DWORD dwBytesReturned; int fn; USHORT inBuf = COMPRESSION_FORMAT_DEFAULT; if((rbBool != Qtrue) && (rbBool != Qfalse)){ rb_raise(rb_eTypeError,"Argument must be true or false"); }

Am 5/9/20 um 3:32 PM schrieb Ralph Boehme via samba: > I have a WIP fix for master, can you give it a whirl? here it is. -slow -- Ralph Boehme, Samba Team https://samba.org/ Samba Developer, SerNet GmbH https://sernet.de/en/samba/ GPG-Fingerprint FAE2C6088A24252051C559E4AA1E9B7126399E46 -------------- next part -------------- A non-text attachment was scrubbed... Name:

Hi Ralph, I applied the patch to a new build of Sernet 4.4.6 SRPM. I could still open the file from both hosts, and in fact this time I could actually open it on the same host without any problems: host 1: smbclient -U ajc //172.31.0.120/ifa_v ... smb: \jmi\Corporate Accounting\ISL Ltd Accounts\2016\1609\> open "201609 213_ ISL Balance sheet variance analysis.xls" open file

The Wine development release 3.15 is now available. What's new in this release (see below for details): - Support for DPI scaling on Android. - HID device support in Raw Input. - Many more new icons in Shell32. - WinHTTP converted to use Windows Sockets. - Syntax fixes in the command line interpreter. - Various bug fixes. The source is available from the following locations:

Hi, is it possible to use the new "halo" feature to create a replica 2 volume on 2 bricks that are located in 2 different regions (10+ ms latency) so to be able to write to both nodes from each region without the need to a synchronous confirmation of the other node? Does this page includes the most up to date /complete docs about that feature?

in my /var/log/gluster/bricks/mybrick-path.log I get thousands of those errors: ------ [2017-11-22 21:06:23.768354] E [MSGID: 138003] [index.c:624:index_link_to_base] 0-sharedvol-index: /home/sharedvol/.glusterfs/indices/xattrop/0b852dad-b332-4bfe-a38b-976729ee46a2: Not able to add to index [Troppi collegamenti] The message "E [MSGID: 138003] [index.c:624:index_link_to_base]