← Back to branch summary

~ubuntu-branches/ubuntu/maverick/samba/maverick-security

« back to all changes in this revision

Viewing changes to docs/htmldocs/Samba3-Developers-Guide/pt01.html

  • Committer: Bazaar Package Importer
  • Author(s): Chuck Short
  • Date: 2010-01-29 06:16:15 UTC
  • mfrom: (0.27.9 upstream) (0.34.4 squeeze)
  • Revision ID: james.westby@ubuntu.com-20100129061615-37hs6xqpsdhjq3ld
Tags: 2:3.4.5~dfsg-1ubuntu1
https://launchpad.net/bugs/462169
https://launchpad.net/bugs/493565
* Merge from debian testing.  Remaining changes:
  + debian/patches/VERSION.patch:
    - set SAMBA_VERSION_SUFFIX to Ubuntu.
  + debian/smb.conf:
    - Add "(Samba, Ubuntu)" to server string.
    - Comment out the default [homes] share, and add a comment about "valid users = %s"
      to show users how to restrict access to \\server\username to only username.
    - Set 'usershare allow guests', so that usershare admins are allowed to create
      public shares in additon to authenticated ones.
    - add map to guest = Bad user, maps bad username to gues access.
  + debian/samba-common.conf:
    - Do not change priority to high if dhclient3 is installed.
    - Use priority medium instead of high for the workgroup question.
  + debian/mksambapasswd.awk:
    - Do not add user with UID less than 1000 to smbpasswd.
  + debian/control: 
    - Make libswbclient0 replace/conflict with hardy's likewise-open.
    - Don't build against ctdb, since its not in main yet.
  + debian/rules:
    - Enable "native" PIE hardening.
    - Add BIND_NOW to maximize benefit of RELRO hardening.
  + Add ufw integration:
    - Created debian/samba.ufw.profile.
    - debian/rules, debian/samba.dirs, debian/samba.files: install
  + Add apoort hook:
    - Created debian/source_samba.py.
    - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install
  + debian/rules, debian/samba.if-up: allow "NetworkManager" as a recognized address
    family... it's obviously /not/ an address family, but it's what gets
    sent when using NM, so we'll cope for now.  (LP: #462169). Taken from karmic-proposed.
  + debian/control: Recommend keyutils for smbfs (LP: #493565)
  + Dropped patches:
    - debian/patches/security-CVE-2009-3297.patch: No longer needed
    - debian/patches/fix-too-many-open-files.patch: No longer needed

Show diffs side-by-side

added added

removed removed

Lines of Context:
docs/htmldocs/Samba3-Developers-Guide/pt01.html
1
 
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Part�I.�The protocol</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.74.0"><link rel="home" href="index.html" title="SAMBA Developers Guide"><link rel="up" href="index.html" title="SAMBA Developers Guide"><link rel="prev" href="pr01.html" title="Attribution"><link rel="next" href="unix-smb.html" title="Chapter�1.�NetBIOS in a Unix World"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Part�I.�The protocol</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr01.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="unix-smb.html">Next</a></td></tr></table><hr></div><div class="part" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="id2499106"></a>Part�I.�The protocol</h1></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="unix-smb.html">1. NetBIOS in a Unix World</a></span></dt><dd><dl><dt><span class="sect1"><a href="unix-smb.html#id2499134">Introduction</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2499155">Usernames</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2499487">File Ownership</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2499519">Passwords</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2498852">Locking</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2498904">Deny Modes</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2498936">Trapdoor UIDs</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2498957">Port numbers</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2549987">Protocol Complexity</a></span></dt></dl></dd><dt><span class="chapter"><a href="ntdomain.html">2. NT Domain RPC's</a></span></dt><dd><dl><dt><span class="sect1"><a href="ntdomain.html#id2550106">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2550271">Sources</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2550298">Credits</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2550329">Notes and Structures</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2550334">Notes</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2550397">Enumerations</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2550559">Structures</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2552829">MSRPC over Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2552839">MSRPC Pipes</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2552923">Header</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2553596">Tail</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2553632">RPC Bind / Bind Ack</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2553771">NTLSA Transact Named Pipe</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2553899">LSA Open Policy</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2553994">LSA Query Info Policy</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554076">LSA Enumerate Trusted Domains</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554146">LSA Open Secret</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554229">LSA Close</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554280">LSA Lookup SIDS</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554441">LSA Lookup Names</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2554613">NETLOGON rpc Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2554739">LSA Request Challenge</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554848">LSA Authenticate 2</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2554963">LSA Server Password Set</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2555054">LSA SAM Logon</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2555134">LSA SAM Logoff</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2555205">\\MAILSLOT\NET\NTLOGON</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2555219">Query for PDC</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2555420">SAM Logon</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2555670">SRVSVC Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2555704">Net Share Enum</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2555872">Net Server Get Info</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2555961">Cryptographic side of NT Domain Authentication</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2555968">Definitions</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556093">Protocol</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556172">Comments</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2556214">SIDs and RIDs</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2556246">Well-known SIDs</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556484">Well-known RIDS</a></span></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr01.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="unix-smb.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Attribution�</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">�Chapter�1.�NetBIOS in a Unix World</td></tr></table></div></body></html>
 
1
<html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Part�I.�The protocol</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"><link rel="home" href="index.html" title="SAMBA Developers Guide"><link rel="up" href="index.html" title="SAMBA Developers Guide"><link rel="prev" href="pr01.html" title="Attribution"><link rel="next" href="unix-smb.html" title="Chapter�1.�NetBIOS in a Unix World"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Part�I.�The protocol</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="pr01.html">Prev</a>�</td><th width="60%" align="center">�</th><td width="20%" align="right">�<a accesskey="n" href="unix-smb.html">Next</a></td></tr></table><hr></div><div class="part" title="Part�I.�The protocol"><div class="titlepage"><div><div><h1 class="title"><a name="id2505164"></a>Part�I.�The protocol</h1></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="chapter"><a href="unix-smb.html">1. NetBIOS in a Unix World</a></span></dt><dd><dl><dt><span class="sect1"><a href="unix-smb.html#id2505193">Introduction</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2505214">Usernames</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2505546">File Ownership</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2505577">Passwords</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2504910">Locking</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2504962">Deny Modes</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2504994">Trapdoor UIDs</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2505015">Port numbers</a></span></dt><dt><span class="sect1"><a href="unix-smb.html#id2556040">Protocol Complexity</a></span></dt></dl></dd><dt><span class="chapter"><a href="ntdomain.html">2. NT Domain RPC's</a></span></dt><dd><dl><dt><span class="sect1"><a href="ntdomain.html#id2556159">Introduction</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2556325">Sources</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556351">Credits</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2556382">Notes and Structures</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2556388">Notes</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556450">Enumerations</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2556613">Structures</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2558885">MSRPC over Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2558896">MSRPC Pipes</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2558979">Header</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2559653">Tail</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2559688">RPC Bind / Bind Ack</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2559827">NTLSA Transact Named Pipe</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2559955">LSA Open Policy</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560051">LSA Query Info Policy</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560132">LSA Enumerate Trusted Domains</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560202">LSA Open Secret</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560285">LSA Close</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560336">LSA Lookup SIDS</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560497">LSA Lookup Names</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2560669">NETLOGON rpc Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2560795">LSA Request Challenge</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2560904">LSA Authenticate 2</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2561019">LSA Server Password Set</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2561111">LSA SAM Logon</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2561190">LSA SAM Logoff</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2561262">\\MAILSLOT\NET\NTLOGON</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2561276">Query for PDC</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2561476">SAM Logon</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2561726">SRVSVC Transact Named Pipe</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2561760">Net Share Enum</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2561928">Net Server Get Info</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2562018">Cryptographic side of NT Domain Authentication</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2562024">Definitions</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2562150">Protocol</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2562229">Comments</a></span></dt></dl></dd><dt><span class="sect1"><a href="ntdomain.html#id2562270">SIDs and RIDs</a></span></dt><dd><dl><dt><span class="sect2"><a href="ntdomain.html#id2562302">Well-known SIDs</a></span></dt><dt><span class="sect2"><a href="ntdomain.html#id2562541">Well-known RIDS</a></span></dt></dl></dd></dl></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="pr01.html">Prev</a>�</td><td width="20%" align="center">�</td><td width="40%" align="right">�<a accesskey="n" href="unix-smb.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Attribution�</td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top">�Chapter�1.�NetBIOS in a Unix World</td></tr></table></div></body></html>