why the following doesn't work with ext3 or 4?
dd if=/dev/urandom of=/tmp/container.bin bs=1024 count=20000
sudo losetup /dev/loop2 /tmp/container.bin
sudo cryptsetup -c aes -s 256 --verify-passphrase luksFormat /dev/loop2[code].........
I'm looking to create an encrypted container file on a samba share, and then mount this locally. I have the following snippet working but only for fat32, and I cannot work out how to get ext3/4 going -
If I format the container as ext3 I can mount it, but never as read write.
I've got a samba share on a linux server, connecting to it with a windows 2k3 server via tools > map network drive. The goal is to be able to use windows to change the security of the samba share. The good news is it works! The bad news is it's not QUITE perfect:
The share is called /company. I started with the following to give everyone access to everything, set the owner of the share to administrator (my domain admin on the Windows domain), and set the group owner to domain users (group that everyone on the domain is part of):
Code:
chmod -R 777 /company
chown -R administrator /company
chgrp -R domain users /company
I then mapped the drive as a regular user, and of course, can access/modify/delete/rename/create anything I want. Then I picked a folder to lock down. Let's call it /company/myFolder. I did this on the Windows server by mapping the drive as administrator (the owner), right click > properties > security tab > advanced > highlight "domain users" and "everyone" and click edit > clear all (i.e. remove all access). Go back to Linux and
[Code]..
The only issue that remains is that I am able to rename/delete "myFolder" as a regular user. I thought this was coming from the "acl map full control = true" parameter in smb.conf, but I changed it to false and verified the change and it still happens. If I remove group and world write access to /company, I am no longer allowed to rename/delete myFolder, but then I can't create a new folder. If I add group write access back in I can create files but can also rename/delete folders within /company that have --- specified for group access. Any ideas what I need to tweak to make this right?
I am looking into encrypting some data on a Fedora samba server. I'm not entirely sure the best way to do this. The server is currently running Fedora 5 but it can be updated if necessary.
I would prefer if the server could be booted up and that no interaction at the server itself have to be done so that users can access their shares.
Is there a way for the data to be encrypted on the server but when the user access the share over samba that it can be accessed?
The research i have done so far seems to point towards methods more intended for a desktop setup. Such as entering passwords at bootup or when opening folders.
I have an Ubuntu 10.04.1 LTS server that I set up a while back and I am considering encrypting the whole box. I store everything on the server and if it were stolen from a home robbery it could be quite devastating. The server is using two 750 GB SATA hard drives formatted with LVM. Inside the LVM I have a small partition on the first drive for the OS, SWAP, and everything else on the first and second drive is /var/media which is where I store all the data. I have set up an encrypted LVM on my laptop but that was during the install using the automatic method.
I can't figure out how to do what I want to do and I don't want to risk destroying the data on the server. What I would like is to non-destructively encrypt the server (System, SWAP, and DATA partitions) similar to how TrueCrypt works on Windows and I'd like the encryption key to be stored on a USB thumb drive so when the server boots it requires a hardware key. (And have the encryption key backed up online in case the flash drive dies.) And I'd like to use AES 256.
Code:
We use a squid proxy server for all http traffic. Is there any way to configure squid so that all traffic which squid and workstation communicates is SSL and encrypted ?
View 2 Replies View RelatedI currently have my home folder encrypted with 128 bit encfs but i have the back up of that 'in the clear' on my back up hard drive. I am not that great with complicated instructions and especially the terminal so what if any is the easiest program to encrypt with?
View 9 Replies View RelatedWhat is the easiest way to encrypt plain text content with a password only? I need to encrypt client login information, but I hate dealing with all the unnecessary complexities of Linux's encryption systems.
I know I am going to get a bunch of people telling me how perfect Seahorse and whatever is, but Seahorse and the default /home directly encryption have both given me too many problems when decrypting my information. I prefer to preserve my data rather than using these methods.
I have Kubuntu 11.04 64-bit installed (software upgrade from 10.10) and I have a separate /home partition. I want to encrypt my /home partition (and perhaps the swap partition as well) but I don't want to have to reinstall Kubuntu. (Mostly because it was a software upgrade and I don't have an 11.04 disc.) I found a tutorial for Encryptfs via one of the stickies that mentions post-install migration, but it says that using Encryptfs on a separate /home partition is more complicated than if it were part of the root partition and that the CDs don't have any software to preserve and configure existing encrypted /home partitions. (Granted this tutorial is made for 9.04, so things may have changed.)
Also, this tutorial makes it sound like if you have your /home directory encrypted that the encrypted data is stored in a folder on the root partition. Is it done the same way if the /home directory is on its own partition? Because I don't think my root partition is large enough to have all of my /home data. (I purposely kept it small because the root partition doesn't seem to get very large.)
i have recently installed thunderbird on my fedora 11 box and so far so good. i am interested in encrypting my emails and digitally signing them as well. does anyone have documentation as to how i can do this? i messed around with it last night but i was not able to import a valid certificate.
View 14 Replies View RelatedI'm installing fedora 12 on a laptop using the live cd, and I have a few questions about the encryption process.
First, I'd like to fill the drive with random data. I've read the fedora documentation and it suggests using the following command: dd if=/dev/urandom of=<device>. The installer didn't offer an opportunity to do this, so I opened a terminal and typed the command. I expected it to take hours on my 160 gig hard drive, but it only took about 3 minutes, and indicated about 600 megs of data had been written. Did I do it correctly? According to palimpsest, my boot partition is sda1 and the other partition is sda2, so that's the one ran the command with.
Second, I need some advice on what to encrypt. The installer shows me the following layout after I select encryption:
LVM Volume Groups
Hard Drives
I know I can't encrypt boot, but I can encrypt lv_root and lv_swap. But is it necessary to do that? And tell me the pros and cons of using a boot loader password?
I encrypted my hard drive on my media PC but it's really annoying having to type in a password every time I turn it on. I chose a short password so it was quick and easy to type in but is it worth encrypting data with a weak password?If the computer is suspended, someone could come along and resume the computer. They would be presented with a locked GNOME session) but the data would be unencrypted; does this go against encrypting the hard drive? Or does the locked GNOME session provide enough security to keep an intruder out?
View 9 Replies View RelatedI would like to encrypt my swap partition ...During installation, I tried to select the "encrypt partition" choice, but it needed a passphrase.After installation, I tried to encrypt my partition ... I followed this article: The problem is that my swap partition always changes its path ...When I first booted the system, it was /dev/sda10, next it became /dev/sdc10, now it is /dev/sdb10. This is probably the reason why in fstab all entries are according to UUID.However, the swap partition is not fond of UUIDs ! I tried to mkswap /dev/<current swap partition> -L Swap, I received a UUID, puted it in /etc/crypttab ... it worked for the first time ... but the second time... did not.
View 14 Replies View RelatedAs part of making a encrypted private folder i told encfs to encrypt swap space on my pc knowing that this would probably break sleep and hibernation. That said i just turned on ubuntu for 5 mins, had to go away for a bit, when i came back to unlock the screen my password was not being accepted, and another 5 mins later the screen said that my session had timed out-i had to do a cold reboot Does this mean i cant lock the screen anymore?
View 7 Replies View RelatedHas anyone tried encrypting the boot partition to prevent the kernel from being modified. Iv tried following this but I'm running into issues when building. [URL] Im using the source from bzr checkout [URL] Last time I tried I screwed grub and it wouldnt boot.
View 9 Replies View RelatedI am attempting to share a folder from an existing drive that has been formatted in NTFS. I simply right click on the folder, goto share, and I can see the option to share to UNIX and that works with no problems. My question is; why is the SAMBA sharing dialog grayed out?
View 1 Replies View RelatedStart>Run>\192.168.0.1storage gives me "The specified network password is not correct." It lists my domain as "ANTEC" which is the name of my computer, though I've changed the workgroup to WELLS. I've run:
setsebool -P samba_domain_controller on
Trying to connect to samba locally gives me this:
Code:
[tedward@hp-firegate ~]$ smbclient //192.168.0.1/storage -Utedafur
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
[code]....
In my opinion there should be a tool installed in Ubuntu by default which lets the user easily encrypt his home folder. One is given the option in the installed, but if one decides to encrypt his folders afterwards that's quite hard to achieve.
View 8 Replies View RelatedI've just installed Ubuntu 9.10 and Samba 3.4. I've shared a folder and have accessed the share from a Windows 7 client. However, I've struggled to configure the share and folder so that the Win7 client can create files and/or folders in the share. Kept getting Permission Denied errors. Finally, (using Webmin) I set the permissions on the file folder so that "Other" had write access. I don't understand why this was necessary (and how unsecure this is). I already had the write access checkbox ticked for "User" but it wasn't enough.
View 1 Replies View Relatedequivalent of "force_user" when sharing with nautilus-share? To put this question into context, I have shared out a folder with "Allow others to create ..." and "Guest Access ..." turned on via the GUI (I believe nautilus-share is applicaition behind the GUI). When Guest accounts create files or folders, I want the owner of the files or folders to be a specific user, rather then "nobody". In a Samba Server, I know you can use the parameter "force_user" in the smb.conf (under an individual sharename) which will specify the owner of the files and subfolders created through the share.
I have tried to add this parameter to the files created in /var/lib/samba/usershares but the owner of the files and folders are still "nobody" (NOTE: I rebooted the PC after making the change to the file) I have just done a fresh installation of Ubuntu 10.10 Desktop with nothing else installed (except the current Updates and the necessary components needed when sharing folders) As a follow on question, I also want to set the permissions for files and folders. To replicate what the "create_mask", "force_create_mode", "directory_mask" and "force_directory_mode" parameters do within a Samba Server.
I have installed ubuntu 10.10 and the Samba addon to configure my shares to my Windows terminals.This is what I got
Firewall off (utf disabled)
Internal Sata /dev/sda1 (EXT4 FS)
External USB HDD /dev/sdb1 mounted at /media/SG1500GB (EXT4 FS)
I have two shares
1. //home/test - Which I can see and access with no problems (can't write to it though even though I set the share as writable?, but, I can read from it). This is available to everyone. My windows terminal can see this folder and access it. This is on my main 80GB internal drive /dev/sda1.
2. //media/SG1500GB/Music. I set this up for everyone full access and I can see it at all my Windows machines but,I can't get into the folder. Windows keeps giving me an error stating network path not found.I also try to access it via the Nautilus (Places/Network/system/music) and get an error message "unable to mount location, Failed to mount windows share". This drive is mounted per the disk utility.
I have karmic on my laptop, and I can't access my windows network. I have had previous versions of ubuntu and managed to configure samba. However, since my last reinstall, I can't get it to work.
View 7 Replies View Relatedhow do you setup a Samba share from the CLI?
View 3 Replies View RelatedI'm running Ubuntu 10.04 and Samba 4.The folder I've shared is on NTFS partition and though is visible from other Windows 7 system on LAN, can't be browsed. Even from my own computer if go to network places the folder is there but when I double click on it I get
View 9 Replies View RelatedI just installed UNE v10.10 on a new netbook and I guess I've become too spoiled using the Desktop's PLACES->Connect to Server because I can't find where this is in UNE. I'd also like to "bookmark" it so I can single click to connect to "crunch20/netshare2" (I have added ip for crunch20 in /etc/hosts).
View 1 Replies View RelatedI need to mount two Samba shares from my Ubuntu Server to my Desktop they are:
[shared]
path = /media/share
read only = no
guest ok = yes
[www]
path = /var/www
read only = no
I made two directories in my home folder on the desktop called share and www how do I mount these now? I have to use the terminal btw.
If I run the command: smbclient -L //192.168.10.101 which is the IP of my server it works.
I use an IBM S50 desktop running XP as a file and print server via Windows shares and so far all my XP and Ubuntu laptops can see and use the shares. Now I would like to move the S50 to Ubuntu and still use it as a file and print server. To test this, I have installed Ubuntu 10.04 via wubi and then I installed samba. First thing was to do the simplest case: follow the official documentation,
[URL]
I followed it to the letter, editing the smb.conf file, creating a /srv/samba/share directory, changing the permissions, and restarting the daemons. I was able to read and write to the share with my Ubuntu laptop. Success! However, my Windows laptop can see the Samba server, but when I click on the share, "Ubuntu server (Samba, Ubuntu)" to reveal the file system, it asks for a username and password.
how to let XP access the Ubuntu share?
Code:
workgroup = workgroup
server string = %h server (Samba, Ubuntu)
security = user
[Code].....
I have just installed Ubuntu 10.10 server on and old pc to use it as a backup server for my and my kids pc's.The pc I use for the Ubuntu server has two sata disks on a fasttrak 378 controller, fakeraid as I have learned, and a single pata disk. I have installed ubuntu on the single pata disk and was planing to use the fakeraid as the samba share.
df -> Code: /dev/mapper/ubuntu-root
75287688 985120 70478136 2% /
none 1024032 248 1023784 1% /dev
none 1030124 0 1030124 0% /dev/shm
[code]....
How do I mount this fakeraid with a mirror setup? should I mount one of the disks, and if so which?
I just set up a quick share to allow another computer to get some files. I then noticed I was already sharing another folder elsewhere that I had forgotten to stop sharing so I stopped it from sharing.
When I got the files I wanted on my other computer I went to stop the share I had just set up but it appeared to be unshared even though I can see and access it on the network.
Any ideas how to stop this share?
I want to mount a samba share form another Ubuntu pc.
With nautilus I can do: smb://xxxxxxx;username@192.168.1.12/sharedfolder/ And i can browse the shared folder without problem
but I want to mount it. I have tried:
Code:
user@compu:~$ sudo mount -t smbfs //192.168.1.12/sharedfolder /mnt/folder -o username=username
mount: wrong fs type, bad option, bad superblock on //192.168.1.64/esco3,
missing codepage or helper program, or other error
[Code].....
Im aware I'm not passing the password and I was hoping it would ask me. Also I'd like to store all that info in my computer and try to auto mount the shared every time i use the pc.