Ubuntu Security :: Way To Make Sure That Samba Is Turned Off On Laptop?
Sep 26, 2010
I have Ubuntu 10.04 installed on my laptop which is wirelessly connected to the router. I have a PC which is Windows XP that is connected wired to the router.Now - I understand that Ubuntu is secure out of the box and so there is no need to worry about configurations. However, a past couple of updates in Ubuntu and I am seeing updates for Samba.I understand that Samba is used for file transfer between Windows and Linux.
Is Samba turned off by defult when Ubuntu is installed - despite having a WinXP computer connected to the router? Is there any way to make sure that Samba is turned off on my Ubuntu laptop?I don't want to transfer any files between my laptop and WinXP. If Samba is enabled, then a Firewall is needed to be configured (I assume), and to me that is sort of pointless with Ubuntu.For arguments sake, if Samba was enabled on my Ubuntu laptop - what would happen to my security?
View 2 Replies
ADVERTISEMENT
Feb 16, 2010
This is the difference in the output of a port scan using Zenmap on the same system with UFW turned off and then with it turned on. It is obvious that UFW works.
View 6 Replies
View Related
Jul 9, 2010
I have installed Ubuntu 10.4 at my laptop (lenovo G530) which includes OpenOffice 3.2 (Oracle). The problem is that I turned the laptop off without saving a document in Openoffice.Now every time I open OpenOffice it comes the OpenOffice Document Recovery and asks me to Press "Start Recovery". The dialog window is too large and I can't move it beyond the top of the screen to find the "Start Recovery" button. It goes until the top of the screen and that 's it!Also I can't resize it to a small one.I have tried to "move" it but it doesn't work.I have autohidden the upper and down bars but nothing!The window is too big to find the "Press button".
How can i make the window going upper the screen?
View 4 Replies
View Related
Jun 18, 2011
Debian, Squeeze, Gnome. Laptop AJP7521P. I had it on for a few daysThen i decided to close the lid (hibernate). When i turned it back on, it did not load. It has a black screen with GRUB written on the top left. I think that grub does not load.My /(root) partition is sda4.Would update grub fix it? (I am worried whether it will find sda4).
View 10 Replies
View Related
Feb 2, 2010
The wireless connection works fine. The wireless switch automatically turns itself on every time I start the computer. However, after turning it off, I can't ever turn it on again unless I restart the computer. And because of this, the wireless connection is disabled until the next time I start the computer.I don't think this is a hardware problem because the switch can be turned on and off, although not in the way I expect.
I'm using ubuntu 9.10 on an Acer Aspire 4740G. The command [lspci | grep Network] shows Atheros Communications Inc. AR928X Wireless Network Adapter (PCI-Express) (rev 01). the [rfkill list] command shows (when the switch is on)
0: phy0: Wireless LAN
Soft blocked: no
Hard blocked: no
and, as expected, shows (when the switch is turned off)
0: phy0: Wireless LAN
Soft blocked: no
Hard blocked: yes
I just want to be able to turn the switch on or off at any time I want as long as the computer is still on.
View 2 Replies
View Related
Jun 15, 2010
We recently had a vulnerability scan done on our network and one of the vulnerabilities was that the dns server discloses the remote host name when using hostname.bind.
Is there any way that we can stop this from happening? Our name server is a Fedora 11 machine.
View 2 Replies
View Related
Mar 31, 2010
Not doubt this sounds alarmist, and perhaps it is... anyway, earlier tonight my mum complained that her home network connection wasn't working. After complaining about Windows and running a virus scan, I returned to my laptop, only to find my Ubuntu 10.04 was having the same problem. Then I noticed the wireless connection light (next to send and receive, which always blinks anyway) was constantly flashing, as if transmitting data, even though neither of us was connected, of course. I turned the router off and on again a few minutes later. Initially the light was still blinking abnormally, but I could now access the internet, as could mum, so I ignored it.
Later on, while the virus scan on mum's computer was running, Windows notified her she was running out of hard drive space - normally about 30GB of the 51GB HD is used on her laptop, but suddenly 50GB had been used. I also noticed my 275GB Ubuntu partition had 235GB free (although total size of files on disk was 128TB - a bug perhaps?), i.e. 40GB used, which seems pretty large for a rather fresh install and a handful of documents!Currently, everything's normal where my router's concerned (no blinking lights except for my browsing), and my Lucid partition is still showing 235GB free (strangely, mum's laptop now shows 46GB used instead of 50GB). So, what do we make of all this? Were our computers hacked for storage space?
View 12 Replies
View Related
May 19, 2011
Recently I have installed Fedora 14 on my other laptop. It's a dual boot with Windows 7. Everything worked perfectly fine, networking included, until my friend didn't accidently turned off the wireless by pressing a wireless button on the laptop. Since then the wireless on Fedora doesn't work. It does on Windows thought. I've tried restarting the laptop few times, but the wireless still doesn't want to work again.
View 2 Replies
View Related
May 8, 2011
I'm concerned about security of having a LAMP server on my laptop as having any server makes the system less secure. However, if I were to create a new partition and install a lamp server on that and only use it when offline, would the security of my main partition be affected at all?
View 3 Replies
View Related
Mar 19, 2010
I've got a samba share on a linux server, connecting to it with a windows 2k3 server via tools > map network drive. The goal is to be able to use windows to change the security of the samba share. The good news is it works! The bad news is it's not QUITE perfect:
The share is called /company. I started with the following to give everyone access to everything, set the owner of the share to administrator (my domain admin on the Windows domain), and set the group owner to domain users (group that everyone on the domain is part of):
Code:
chmod -R 777 /company
chown -R administrator /company
chgrp -R domain users /company
I then mapped the drive as a regular user, and of course, can access/modify/delete/rename/create anything I want. Then I picked a folder to lock down. Let's call it /company/myFolder. I did this on the Windows server by mapping the drive as administrator (the owner), right click > properties > security tab > advanced > highlight "domain users" and "everyone" and click edit > clear all (i.e. remove all access). Go back to Linux and
[Code]..
The only issue that remains is that I am able to rename/delete "myFolder" as a regular user. I thought this was coming from the "acl map full control = true" parameter in smb.conf, but I changed it to false and verified the change and it still happens. If I remove group and world write access to /company, I am no longer allowed to rename/delete myFolder, but then I can't create a new folder. If I add group write access back in I can create files but can also rename/delete folders within /company that have --- specified for group access. Any ideas what I need to tweak to make this right?
View 1 Replies
View Related
Jul 8, 2010
I recently got a nice, lightly used IBM Thinkpad laptop. It has wireless capability for the Internet. Linux is the only OS in the laptop. At home, I don't have wireless-- I have a wired DSL connection for my laptop and for my IBM desktop (which also only has Linux as OS).
When I took the laptop to the public library, wireless is provided there for free and I had no trouble connecting to the system there. But since I'm new to wireless, what do I need to have installed to have a secure laptop when in the public library (or when I'm anywhere else that offers free wifi) using the wireless connection? [I use Firestarter as my firewall in the laptop and in the desktop.] Do I have to install some software to make sure my laptop is secured from spying and invasions when in the library or is the Firestarter enough? If Firestarter is not enough, what is that wifi security software by name?
[My OS is MEPIS 8.5, a Debian-based distro.]
View 2 Replies
View Related
Apr 7, 2009
I'm just curious as to what security measure's I should be taking to make my box a little less vulnerable? I'm still experimenting/playing with Linux, use the net, IM, download this and that and was wondering how secure fedora 10 was out of the box?
View 12 Replies
View Related
Jun 4, 2010
Slower than dial-up even. Fstab below code...
View 4 Replies
View Related
Jan 11, 2010
I'll try not to be too wordy. Want to get my openSUSE 11.2 (fresh install) laptop to see my network shares ...not to be a server or share any files. I've looked at 50 websites and everything seems to be "server" and "share" oriented. Maybe I (newb) am confused by the terminology...
I have a router that provides DHCP. My LAN PC's consist of a Vista laptop, an XP DAW, and a Kubuntu file server. Somehow I got Kubuntu configured properly, all of the Windows machines can access it and vice-versa. The Kubuntu smb.conf does not work on this laptop, and it seems overkill -no shares needed here. And yes, I get DHCP and interweb on the laptop -posted this with it.
All I want is access to my (other) network drives from this (openSUSE 11.2) laptop. Not a server, not to share. This is easy... right? It's driving me nuts Is there a Samba configuration that will let me jump onto networks and surf Windows/Samba shares like any old Windoze box browsing Network Neighborhood? Do I have to be a Samba guru?
View 7 Replies
View Related
Feb 7, 2010
I made a Ubuntu server and it is pretty cool. I had a windows computer that I could copy and paste files to and from over the network. What you did is just find it in My Network and the files were available there. How do I make Ubuntu or Samba act like that?
View 2 Replies
View Related
Feb 11, 2010
i have been running linux distros in virtualbox because i don't want to install it on a computer until i get it working is it even possible to make samba run under puppy if so how do i do it and is there a great gui for samba that will run great in puppy and how do i install it
View 4 Replies
View Related
Jun 10, 2010
why the following doesn't work with ext3 or 4?
dd if=/dev/urandom of=/tmp/container.bin bs=1024 count=20000
sudo losetup /dev/loop2 /tmp/container.bin
sudo cryptsetup -c aes -s 256 --verify-passphrase luksFormat /dev/loop2[code].........
View 1 Replies
View Related
Jul 15, 2010
i hope some one could help me regarding samba.. i am running a FC13 acting as a samba server & an IP of 192.168.0.3.. I have already installed samba from the fedora core repo.. I can see my samba server on my winxp client.. but everytime i tried to access the samba share a windows message appears that says:\192.168.0. 3 Installer is not accessible. You might not have permission to use this network resource. etc. the network path is not found.I already open the port 139 & 445 for samba to pass trough the firewall.. but the problem is still the same.
View 65 Replies
View Related
Jan 28, 2010
I have been trying to get my Samba 3.x NAS to connect to my Windows XP laptop. I can see the server though I cannot open it and see the shares. I have run various tests on the network and Samba (ping, smbclient) though still cannot find why I can't connect.
I can access the NAS via webmin, so I am thinking I need the security or the services settings on the XP machine. Is there a list somewhere of the Windows XP services and security settings required to share files?
View 4 Replies
View Related
Apr 25, 2010
it's driving me nuts. Done a few things now, including this last: [URL]that didn't work. All the other comps in the house are windows 7, and I want this box to be my file server, with two 1 TB HDD plugged into it via USB, but I can't get the damn samba to allow access to everyone. Here's the path in the config file:
[data]
comment = Test sharing
path = /media/Shared
[code]....
View 6 Replies
View Related
Sep 23, 2010
I've prepared a Samba fileserver at work without much too problems and I've prepared a batch file to mount it as z: letter on windows machine at startup.As a sad result the share gets filled with many viruses and became a vehicle of infection.
folder1 ----> folder2 and many other files and folders
folder1 has a condivision access read and write for everyone so I get no problems with passwords for all those who have access but i use ntfs security to do it read only (viruses act like if a pendrive is connected and mainly put infected files just in the "root" of it, in my case in folder 1) and then give everyone full control in folder2. I've been trying to understand how to do this but I'm quite new to linux and smb.conf really scared me. I've tried samba graphical tool which was a lot easier but I'm not able to achieve this kind of result: no need of user password for users to mount the share and no write possibilities in folder 1 and full control in folder 2.
View 7 Replies
View Related
Jan 9, 2011
I'm running Maverick Meerkat 10.10 x64, and I'm trying to set up a Samba share with user security. In other words, when accessing the share, I want to be prompted for my username and password. Everything in my smb.conf file looks ok to me, but the shares are still accessible with no user security, and I don't know why. The smb.conf file is below:
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
[Code]....
View 6 Replies
View Related
Mar 18, 2011
I have in my hands a bunch of samba logs, about 24 different files and I was wondering if there was a tool that would go through them and organize them into something readable.I had a gander at Sawmill
View 2 Replies
View Related
Nov 9, 2010
I have been getting the following in the samba section of the log watch report for the past few days. But don't know what it means.
[Code]....
and more. What does it mean? Does it mean any attempt to hack or is it some kind of status update? If this is not a threat and can be suppressed, how can I do this?
View 2 Replies
View Related
Feb 7, 2011
How do I make ntlmv2 and 128 bit encryption work with Samba. i.e. I have a Win 2008/Win7/Vista box with standard settings i.e. forced using ntlmv2 and 128 bit encryption that I want to connect to a Linux server running Samba (RHEL6 in this case). Now if you google you it says Samba should support ntlmv2 with settings like this:
lanman auth = no
ntlm auth = no
client lanman auth = no
client ntlmv2 auth = yes
However even with 128 bit encryption turned off on the Win box it still doesn't work. We use "security = server". Is it maybe a requirement that we need to use security domain instead for ntlmv2 to work? Reading further in man smb.conf.5 "client ntlmv2 auth = yes" is "This parameter determines whether or not smbclient will attempt to authenticate itself to servers using the NTLMv2 encrypted password response." so clearly it's not affecting our samba server.
Reading even further in man smb.conf.5 it says "If this option (lanman auth), and ntlm auth are both disabled, then only NTLMv2 logins will be permited". Why is it then that you need to force NTLM auth in Win2008?
NTLMv2 is only compatible with "security=domain". This means that even if you set "lanman auth=no", and "ntlm auth=no" it will still only auth with NTLM... Here is the Q from Andrew Bartlett * "Use 'security=domain'. NTLM2 session security is not compatible with 'security=server'."
In order to use "security=domain" you need to use the net command to join the windows domain and for that you will need the AD administrator account password which you will most likely not have. However the question still reminds if you would to join the domain would the NTLMv2 work over 128 bit encystations or would you need to disable that one still?
View 1 Replies
View Related
Mar 21, 2010
I'm running Ubuntu 9.1 server on an PII Compaq. Read an article "Samba: How to share files for your LAN without user/password" [URL] and some others and can see and pull up files, can't change or delete. Here is my smb.conf:
# Sample configuration file for the Samba suite for Debian GNU/Linux.
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
# - When such options are commented with ";", the proposed setting
# differs from the default Samba behaviour
# - When commented with "#", the proposed setting is the default
# behaviour of Samba but the option is considered important
# enough to be mentioned here .....
View 22 Replies
View Related
Feb 9, 2010
Still working on the mask of files for shared folder. I now have a shared folder with the exact behavior I expect :
Code:
sudo addgroup share_group
sudo mkdir /media/volume/shared_dir
sudo chgrp share_group /media/volume/shared_dir
sudo chmod g+s /media/volume/shared_dir
sudo chmod 770 /media/volume/shared_dir
sudo setfacl -d -m group::rwx /media/volume/shared_dir
sudo setfacl -d -m other::--- /media/volume/shared_dir
emma@box:/media/volume/shared_dir$ ls -al
total 8
drwxrws---+ 2 root share_group 4096 2010-02-09 12:53 .
drwxr-xr-x 8 root root 4096 2010-02-09 11:58 ..
-rw-rw----+ 1 emma share_group 0 2010-02-09 12:53 test
By default, user from the group can modify this file. That's perfect.
I have define the share in Samba this way :
Code:
[share]
comment = Shared Folder
path = /media/volume/shared_dir
browseable = yes
guest ok = no
read only = no
hide dot file = yes
# force group = share_group
# create mask = 0660
# directory mask = 0770
# force create mask = 0660
# force directory mask = 0770
When drag & dropping a file in this share, here is the default mask:
Code:
emma@box:/media/volume/shared_dir$ ls -al
total 192
drwxrws---+ 2 root share_group 4096 2010-02-09 12:54 .
drwxr-xr-x 8 root root 4096 2010-02-09 11:58 ..
-rw-rwx---+ 1 emma share_group 6148 2010-02-09 12:54 .DS_Store
-rw-rwxr--+ 1 emma share_group 176684 2009-12-21 23:33 IMG_7487.jpg
So the dropped file have execution rights for the group, and read access for other. I expected it to have the same rights than the file created directly using the touch command. I tried to play with the mask options, without success. The file has been dropped from my mac, which is a Unix like OS. I guess that some authorization access are inherited from the original file, for the user and other parts. But where does the group authorization come from ? Moreover, is is possible to define in samba a default mask, whatever the authorization of the original file?
View 1 Replies
View Related
Mar 17, 2010
I got alarm on Firestarter showing attack from samba service on port 139 . Is that ok for my host computer ? or a serious attack .
View 9 Replies
View Related
Jan 20, 2009
I'm trying to install Fedorad 9 on my windows Vista dell xps laptop in a seperate partition. I can't seem to make my laptop boot off of the DVD i'm burning the Fedora ISO to. I'm just using Windows, not Nero or anything like that. I've changed the boot options in setup, burned the ISO to the DVD and rebooted but I end up in Windows. By the way, should I just go ahead and use Fedora 10 as a new user or has it been "debugged"? I don't need any additional "new version" problems at this point.
View 2 Replies
View Related
Feb 24, 2010
I want to make a server that I can log into from my lap top over wireless and access virtual machines, and server terminals. VPN over ssh maybe? Is there a fedora server edition i can use and does it have the required capabilities?
View 3 Replies
View Related
