Fedora Servers :: Encrypting Home Directory Shared Over Samba?
May 6, 2009
I am looking into encrypting some data on a Fedora samba server. I'm not entirely sure the best way to do this. The server is currently running Fedora 5 but it can be updated if necessary.
I would prefer if the server could be booted up and that no interaction at the server itself have to be done so that users can access their shares.
Is there a way for the data to be encrypted on the server but when the user access the share over samba that it can be accessed?
The research i have done so far seems to point towards methods more intended for a desktop setup. Such as entering passwords at bootup or when opening folders.
View 1 Replies
ADVERTISEMENT
Jul 9, 2010
I want to update all the machines in the network from a central repository which is on my master server and whose archive directory is shared through samba.I searched in the man page of sources.list and found that there is an option for this but can't able to implement this. Can anybody kindly tell me the way to do the same.
View 1 Replies
View Related
Nov 10, 2010
I did a fresh Maverick install with custom partition layout and didn't select "encrypt home parition" as my home partition was being saved from previous installation.Now, is there a guide I could follow to encrypt my home partition the same way Maverick would do? I just want to avoid screwing my system in the next upgrade if encrypting methods differ.
View 2 Replies
View Related
Sep 29, 2010
I have 10.04 and have samba running.
Samba is remotely administered with webmin and aim to setup home directory sharing. I am however having some trouble getting this to work.
I was of the understanding that home directory sharing allows me to create a user in ubuntu, which samba will then pickup and offer it up as a share.
My smb.conf looks like this..
Code:
#======================= Global Settings =======================
[global]
unix extensions = no
share modes = no
security = user
[Code]....
Essentially I've found this works providing I give the samba user a password after it is automatically created using the 'Configure automatic Unix and Samba user synchronisation' option in webmin.
However if I move the location of this home folder off the main drive i.e. /home/username I get turned away at attempted login.
I've tried specifying the path in [homes] using the path = /media/discarray, but this seems to break authentication somehow.
View 2 Replies
View Related
Mar 30, 2011
I'm trying to set up a computer to allow a specific samba user to access and write to a folder on the web-server without any luck. I've tried creating symbolic links in the users home to the folder (/var/www/html/something) on the web server and from the server to a directory in the users home but neither seems to work. I haven't seen any errors from SELINUX either but I'm kind of stuck. Also tried adding a directory section and alias line to the httpd.conf but after doing that apache wouldn't start so I'm not really sure how this would be done properly.
View 1 Replies
View Related
Jul 6, 2011
I tried to browse my home dir but I can not. I chown also with loek:loek /home Here is my sambaconfig:
[global]
workgroup = MYNETWORK
netbios name = LINUX
security = SHARE
log file = /var/log/samba/log.%m
[Code]....
View 3 Replies
View Related
Aug 4, 2011
Linux and have a western digital server (my book world edition) I can access it with Ubuntu 11.04, just by downloading Samba and then by clicking on network and the server shows up, but with Fedora 15, after I have installed Samba, I click on network and all that shows up is my router?
View 1 Replies
View Related
Oct 2, 2009
In my samba configuration, I have a strange share.
Share name: MyPrinter
Shared folder: /var/spool/samba
comment = lp
read only = No
print ok = Yes
The spool directory /var/spool/samba has been shared as a printer. What will be the harm caused by it? (I don't know who shared such). And I also wanted to know the security issue due to it..
View 1 Replies
View Related
Oct 20, 2009
I am running Ubuntu 9.04, and wish to share a folder to be accessed without logging in via Windows Vista. If I set up the share through the nautilus right-click menu and enable "Guest Account", the share is inaccessible. The folder shows up, but it fails to mount. Vista says that it can see the computer, but not the shared folder.
The folder is
/home/william/shared
The only way I can get it to work is if I change the permissions of the folder /home/william to allow Others to access files.
View 1 Replies
View Related
Dec 15, 2010
I'm trying to restrict a particular ssh user to his home directory, I'm just giving him access so that he can ssh to another server that is only accessible from the former but restrict his movement so that he can't poke around the former.I already made some changes to sshd_config file and added the following line at the end:
Did some test, user joe can ssh to the server but unable to do anything aside from logging in, even a simple ls command will immediately close the putty session. I know I'm still missing something but don't really know what it is.I also tried this how to that uses rssh --> http://www.adamhawkins.net/2009/05/r...ured/#more-431 however when I login the session immediately closes.
View 5 Replies
View Related
Feb 1, 2009
I just installed FC10 and then used yumex to install the vsftpd FTP daemon package. I'm using the vsftpd.conf file that came with the distribution, and its almost identical to one I copied from my FC2 machine's working set-up. When I try to FTP in as a known system user I'm presented with my home directory /home/myusername/. The directory appears empty to the FTP program, but isn't in reality. I can't upload a file to the empty home directory. I can move up the directory hierarchy to /home/, but again that appears as an empty directory.
I don't think it's a vsftpd.conf file issue. I've tried everything I can there. Could it have something to do with permissions? I fiddled with those, but couldn't make an FTP directory listing work.
[code]....
View 5 Replies
View Related
May 21, 2010
I have an SFTP server using OpenSSH on a server running Fedora 12. I want to chroot my sftponly users into their home directory but I want to let them have write access to their upload/ folder. Right now users can log in and view & download items, but for some reason I can't get write access to work. Here's some info:
username: testuser
group: sftponly
from /etc/passwd:
testuser:x:501:501::/home/testuser/:/bin/false
[code]...
View 1 Replies
View Related
Jun 2, 2010
I have shared few webpages in /home/vinay/public_html directory and I have made necessary changes in /etc/httpd/conf/httpd.conf file
Code:
But how to access these pages through Browser. When I open the browser with
Code:[url]
It shows contents of index.html in /var/www/html which is default DocumentRoot
How to provide the URL to access webpages in /home/vinay/public_html directory.
View 1 Replies
View Related
May 24, 2011
I need to specify a different path to home directories on a particular server than what LDAP contains for the users, besides using a symlink. E.g. "/Users/jdoe" vs "/home/jdoe" I don't want to change the actual LDAP attributes, just want a particular server to point them in the right direction (Ubuntu 10.04).
I'm assuming it's something I could probably set in pam configurations?
View 1 Replies
View Related
Feb 24, 2009
I'm trying to setup a Samba network share with a Fedora Directory Server backend. This will be used primarily for Windows users to authenticate before accessing the share. I am using Fedora Core 10 and have all of the latest updates installed. When I try to connect from a Windows machine, I am prompted for a username and password. I enter the username and password of the account I created in Fedora Directory Server in OU=People. The credentials are rejected. At the same time in the log file I see this:
[2009/02/24 16:50:16, 3] auth/auth_sam.c:check_sam_security(282)
check_sam_security: Couldn't find user 'Administrator' in passdb.
[2009/02/24 16:50:16, 2] auth/auth.c:check_ntlm_password(318)
check_ntlm_password: Authentication for user [Administrator] -> [Administrator] FAILED with error NT_STATUS_NO_SUCH_USER
Administrator is the user I created in Fedora Directory Server. If I perform an ldapsearch it will find the user as uid: Administrator so I know it is able to be looked up in FDS. But I'm guessing that's not the problem.
[Code]...
View 4 Replies
View Related
Nov 28, 2009
I can not use nfs from F10 client to F12 server. nfs mount on F10 to F12 times out anf nfs4 mount gives "mount.nfs4: mounting localhost:/home failed, reason given by server: No such file or directory" I have tried to close firewall and set selinux to permissive mode on both client and server with same result. Samba works fine. On server [root@flokipal ~]# mount -t nfs4 localhost:/home /media/tonlist mount.nfs4: mounting localhost:/home failed, reason given by server: No such file or directory
but
[root@flokipal ~]# mount -t nfs localhost:/home /media/tonlist
[root@flokipal ~]#
works
View 3 Replies
View Related
Mar 24, 2011
I did set samba server up. I just modified only one configuration from default /etc/samba/smb.conf file.
Just workgroup = MSHOME to workgroup = WORKGROUP.
And browseable = yes.
Beacuse my xp workgroup is WORKGROUP. So I changed as same workgroup name
both unbuntu and XP.
But I couldn't find samba pc on network places at XP. I have started smbd and nmbd already. There is a ridiculous something. I can access samba at XP only typing \samba IP address. But why I can't see at network places. I am using ubuntu 10.04 TL.
View 1 Replies
View Related
Sep 27, 2010
Im wondering about proxy servers, see it is like this: I got banned from a samp server and i can't get my ip changed (it's not the local address it's the one all the computers in my house shares) I searched a little bit and discovered that a proxy server would be the best option. If I have it in some one else house I will get another ip right? Is it possible to install some software on my laptop and just use that? and how do I do that? Btw I found this: [URL]. But I didn't understand so much of it.
View 4 Replies
View Related
Mar 28, 2011
I am trying to setup 2 individual FTP users. They should both have access to the same directory. They both need to be able to read/write into the directory. But, I want them not to be able to write to each other's files (e.g. delete, remove, rename, etc.).
So let's say the shared directory is: /home/ftp/shared/
UserA needs read/write access to /home/ftp/shared/. UserA should only have write access to his own files.
UserB also needs read/write access to /home/ftp/shared/. UserB should only have write access to his own files.
It would be a unix box of sorts, but that is the only restriction. I could use whatever software. I am currently thinking pure-ftpd or vsftp but I am open to all ideas.
View 1 Replies
View Related
Nov 28, 2010
I have just installed Ubuntu desktop and I am using this pc as a file server. I have already installed Samba and have it operational and viewable by my windows computers. Now the problem is that I have 2 hard drives and the way that I have Samba set up it is sharing my home directory which is wonderful but my windows computers do not have access to the second hard drive. I search for several hours this morning trying to figure out how to do this but cannot figure it out.
View 7 Replies
View Related
Jul 15, 2010
I'm not able to create Samba Account. it is showing the error message as below
Failed to initialise SAM_ACCOUNT for user <username>. Does this user exist in the UNIX password database ?
Failed to modify password entry for user <username>
Unix accounts are created in Corporate Office, which is in US. We had a dedicated link from our office to US office. Now this link has been disconnected & now we have a VPN connection through internet to US Office. there is a firewall on both the sides. While creating samba account i tried to give netstat command & i saw it is trying to make a connection to the Unix Server at US, but the connection is not getting established it is showing SYN_SENT.
The port from the Home directory server trying to connect to the Unix server is connecting using Dynamic port but the Unix server port it is showing as PORTMAP. Network guys are not opening all the ports in the firewall. Kindly let me know the DESTINATION PORT that the home directory server is trying to connect to Unix Server, so that i can ask my network guys to open that perticular port. So that i can create Samba account to the users.
View 1 Replies
View Related
Jun 13, 2010
I'm looking to create an encrypted container file on a samba share, and then mount this locally. I have the following snippet working but only for fat32, and I cannot work out how to get ext3/4 going -
If I format the container as ext3 I can mount it, but never as read write.
View 3 Replies
View Related
Mar 27, 2011
Continuing with my assigned task of migrating the company's PCs to GNU/Linux (openSUSE as server for GNU/Linux clients) I managed to set up a DC with roaming profiles for the few remaining Windows users, user validation and login for the openSUSE boxes and a few network shares with different rights. I know there are no roaming profiles for GNU/Linux and I can live with that but I would like to specify wich users/groups would have their home directories saved locally (notebook users) and which will save them on the Samba server.
By default home directories are saved locally but somehow Samba creates a minimal home directory for each user under /home in the Samba server. How can I tell the client box to use that directory? and how can I set up the few notebook users to save it on their disks? Maybe using the options under Yast > Security... > Users and groups management > Users (LDAP Users filter) > and then select the user and use the "Manage Samba account parameters" plug-in for specifying the different paths cant achieve this.
View 4 Replies
View Related
Jan 25, 2010
There is like one month since dig fails running after some upgrade. Platform: Ubuntu-Server 6.06.1 _Dapper Drake_ - Release amd64 Error: Code: dig: error while loading shared libraries: libdns.so.21: cannot open shared object file: No such file or directory.
View 2 Replies
View Related
Jan 25, 2010
After adding a second ubuntu variant to this machine I wanted to share the home directories so I had easy access to the same files regardless. so I read up on modifying home directories and put in the correct location and then rebooted. On boot-up the system warned me that it could not access the "shared" home directory and after a few more errors and warnings ended up at a blank screen with a mouse pointer!. All I can do is access a term window (ctrl-alt f4). So what I need is to know is where the user properties are stored so I can go and edit those from term rather than the usual way!
View 2 Replies
View Related
Jul 17, 2010
I want to use samba for file sharing like on a Windows home network. Actually they are all Linux machines but nfs is too complicated. On my host machine I installed samba and system-config-samba. I created a new share for /home, check marked writable and visible and put access to everybody. For preferences-->server settings--> security the "authentication mode" is set to user, encrypt passwords is no, and guest account is no guest account. Under preferences-->samba users I added myself as a user with the same windows user name as my Linux user name and the same password.
My client is a virtualbox fedora (used for testing purposes but actual clients will be real computers on my home network). I entered the address smb://192.168.1.184. When asked for the user name and password I put my regular user name and password since that was what I set in samba users. However, the password dialog keeps coming up and won't let met into my own computer. If I quit it says something like access is denied. How can I get my home network back? I liked this feature when my home computers ran XP but I switched them to Fedora 12.
View 2 Replies
View Related
Jun 10, 2010
why the following doesn't work with ext3 or 4?
dd if=/dev/urandom of=/tmp/container.bin bs=1024 count=20000
sudo losetup /dev/loop2 /tmp/container.bin
sudo cryptsetup -c aes -s 256 --verify-passphrase luksFormat /dev/loop2[code].........
View 1 Replies
View Related
Dec 2, 2009
I've changed my distro from Kubuntu to Opensuse with Kde and I really like the new one.
Kde look better on opensuse as well as firefox seems to run faster. But I miss a feature I had on Kubuntu that is the encryption of my home folder (And it is essential as I want to install Opensuse on my notebook).
I would like to know if it is possible and, if it is, how to encrypt my system in order to keep all my personal data and stored passwords safe in case of someone have access to my notebook.
I liked opensuse a lot but this is the only thing that is keeping me from a complete distro change.
View 1 Replies
View Related
Jun 12, 2011
I have Kubuntu 11.04 64-bit installed (software upgrade from 10.10) and I have a separate /home partition. I want to encrypt my /home partition (and perhaps the swap partition as well) but I don't want to have to reinstall Kubuntu. (Mostly because it was a software upgrade and I don't have an 11.04 disc.) I found a tutorial for Encryptfs via one of the stickies that mentions post-install migration, but it says that using Encryptfs on a separate /home partition is more complicated than if it were part of the root partition and that the CDs don't have any software to preserve and configure existing encrypted /home partitions. (Granted this tutorial is made for 9.04, so things may have changed.)
Also, this tutorial makes it sound like if you have your /home directory encrypted that the encrypted data is stored in a folder on the root partition. Is it done the same way if the /home directory is on its own partition? Because I don't think my root partition is large enough to have all of my /home data. (I purposely kept it small because the root partition doesn't seem to get very large.)
View 9 Replies
View Related
Jun 20, 2011
I saw this[URL]If your home folder is encrypted, will this work?I am just trying to prevent something like that from happening.
View 1 Replies
View Related
