SAMBA

sahrempire
Posts: 22
Joined: Sat Jan 07, 2012 11:35 pm

SAMBA

Postby sahrempire » Thu Jan 12, 2012 9:20 pm

Hi,

I appear to have broken the samba service/daemon. I suspect I know what is wrong, but I dont know how to confirm it.

In any case, i'll explain the issue, then the probable cause. I looked at my servers status today and saw the server was not running, i refreshed the status, then attempted to start it. nada. I confirmed the service was indeed own by attempting to access the network share, and it is indeed down.

Now, I believe this was caused by some manual changes I made to samba.conf. As this box will someday be used to VPN into my network, I think it advisable to secure it as much as possible. I ran a vulnerability scan against the box, and found several samba related vulnerabilities, and i proceeded to fix them. If I remember correctly, the fix involved restricting anonymous CIFS viewing. The added strings were:

guest account = noaccount (the suggested was nobody, but only if user "nobody" did not exist in /etc/passwd, but there is a nobody user in fedora 14)
restrict anonymous = 1 (should this be 2? when i performed a google search, i found a bunch of references to 2 breaking AD)
server signing = auto
server signing = mandatory

User avatar
radioz
Posts: 406
Joined: Tue Nov 24, 2009 1:07 pm

Re: SAMBA

Postby radioz » Thu Jan 12, 2012 10:13 pm

Have you tried just commenting those lines out?
Samba has a lot of configuration variables. I'm not sure anyone knows how they all work!

Who is online

Users browsing this forum: No registered users and 70 guests