Berkeley CSUA MOTD:Entry 32417
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/05/25 [General] UID:1000 Activity:popular
5/25    

2004/7/22-23 [Computer/SW/Unix] UID:32417 Activity:nil
7/22    Samba 3.0.5 released:
        http://us3.samba.org/samba/whatsnew/samba-3.0.5.html
        Two vulnerabilities fixed.
ERROR, url_link recursive (eces.Colorado.EDU/secure/mindterm2) 2025/05/25 [General] UID:1000 Activity:popular
5/25    

You may also be interested in these entries...
2012/8/26-11/7 [Computer/SW/Security] UID:54465 Activity:nil
8/26    Poll: how many of you pub/priv key users: 1) use private keys that
        are not password protected 2) password protect your private keys
        but don't use ssh-agent 3) use ssh-agent:
        1) .
        2) ..
        3) ...
	...
2012/8/29-11/7 [Computer/SW/Security] UID:54467 Activity:nil
8/29    There was once a CSUA web page which runs an SSH client for logging
        on to soda.  Does that page still exist?  Can someone remind me of the
        URL please?  Thx.
        \_ what do you mean? instruction on how to ssh into soda?
           \_ No I think he means the ssh applet, which, iirc, was an applet
              that implemented an ssh v1 client.  I think this page went away
	...
2012/9/20-11/7 [Computer/SW/Unix, Finance/Investment] UID:54482 Activity:nil
9/20    How do I change my shell? chsh says "Cannot change ID to root."
        \_ /usr/bin/chsh does not have the SUID permission set. Without
           being set, it does not successfully change a user's shell.
           Typical newbie sys admin (on soda)
           \_ Actually, it does: -rwsr-xr-x 1 root root 37552 Feb 15  2011 /usr/bin/chsh
	...
2012/9/24-11/7 [Computer/SW/Languages, Computer/SW/Unix] UID:54484 Activity:nil
9/24    How come changing my shell using ldapmodify (chsh doesn't work) doesn't
        work either? ldapsearch and getent show the new shell but I still get
        the old shell on login.
        \_ Scratch that, it magically took my new shell now. WTF?
           \_ probably nscd(8)
	...
2012/3/29-6/4 [Computer/HW/Memory, Computer/HW/CPU, Computer/HW/Drives] UID:54351 Activity:nil
3/29    A friend wants a PC (no mac). She doesn't want Dell. Is there a
        good place that can custom build for you (SSD, large RAM, cheap video
        card--no game)?
        \_ As a side note: back in my Cal days more than two decades ago when
           having a 387SX made me the only person with floating-point hardware,
           most machines were custom built.
	...
2012/4/27-6/4 [Computer/SW/Languages/Misc, Computer/SW/Unix] UID:54372 Activity:nil
4/27    I wrote a little shell script to collect iostat data:
        #!/bin/bash
        DATE=`date +%m%d`
        DATADIR=/var/tmp/user
        OUTPUTFILE=$DATADIR/$DATE.out
        while true
	...
2012/1/27-3/26 [Computer/SW/Unix] UID:54299 Activity:nil
1/27    Interesting list of useful unix tools. Shout out to
        cowsay even!
        http://www.stumbleupon.com/su/3428AB/kkovacs.eu/cool-but-obscure-unix-tools
        \_ This is nice.  Thanks.
	...
2011/10/26-12/6 [Computer/SW/Unix] UID:54202 Activity:nil
10/24  What's an easy way to see if say column 3 of a file matches a list of
       expressions in a file? Basically I want to combine "grep -f <file>"
       to store the patterns and awk's $3 ~ /(AAA|BBB|CCC)/ ... I realize
       I can do this with "egrep -f " and use regexp instead of strings, but
       was wondering if there was some magic way to do this.
       \_ UNIX has no magic. Make a shell script to produce the ask or egrep
	...
2011/4/27-7/30 [Computer/SW/Security, Computer/SW/Unix] UID:54096 Activity:nil
4/28    Will wall be fixed?   - jsl
        \_ What's wall?
           \_ An anachronism from a bygone era, when computers were hard to
              comeby, the dorms didn't have net, there was no airbears, and
              when phones didn't come standard with twitter or sms.
           \_ A non useful implementation of twitter.
	...
2011/5/19-7/13 [Computer/SW/Languages/Misc] UID:54115 Activity:nil
5/19    If script A runs, and calls script B ..... is it possible for me to exit\
        script A based on results of script B and not continue?
        \_ assume any shell
        \_ Yes.
           \_ without passing the result to some stupid temp file?
              \_ It sounds like you want "scriptb || exit", which will run
	...
Cache (8192 bytes)
us3.samba.org/samba/whatsnew/samba-3.0.5.html
This is the version that production Samba servers should be running for all current bug-fixes. This same code is used internally to decode the sambaMungedDial attribute value when using the ldapsam passdb backend. While we do not believe that the base64 decoding routines used by the ldapsam passdb backend can be exploited, sites using an LDAP directory service with Samba are strongly encouraged to verify that the DIT only allows write access to sambaSamAccount attributes by a sufficiently authorized user. The Samba Team would like to heartily thank Evgeny Demidov for analyzing and reporting this bug. Please be aware that the default setting for this parameter is 'mangling method = hash2' and therefore not vulnerable. Affected Samba 3 installations can avoid this possible security bug by using the default hash2 mangling method. This is the version that production Samba servers should be running for all current bug-fixes. There have been several issues fixes since the 303 release and new features have been added as well. Common bugs fixed in Samba 304 include: Password changing after applying the patch described in the Microsoft KB828741 article to Windows clients. o Andrew Bartlett * Fix alignment bug in GetDomPwInfo(). o Wim Delvaux * Fix for handling timeouts in socket connections. o Michel Gravey * BUG 483: patch from to fix password hash creation in SWAT. o Volker Lendecke * Close the open NT pipes before the tdis. jp * Multiple variable initialization and memory leak fixes. o Stephan Kulow * Fix string length bug in libsmbclient that caused KDE's Konqueror to crash. o Jim McDonough * BUG 1007, 1279: Store the print job using a little-endian key. o Eric Mertens Compile fix for OpenBSD (ENOTSUP not supported). o Stefan Metzmacher * Correct bug in disks quota views from explorer. o Jelmer Vernooij * Add additional NT_STATUS errorm mappings. Honoring secondary group membership on domain member servers. TDB scalability issue surrounding the TDB_CLEAR_IF_FIRST flag. Delays in winbindd startup caused by unnecessary connections to trusted domain controllers. New features introduced in Samba 303 include: Improved support for i18n character sets. Support for account lockout policy based on bad password attempts. Improved support for long password changes (>14 characters) and strong password enforcement. Experimental support for storing DOS attribute on files and folders in Extended Attributes. Specifying options to be passed directly to the CUPS libraries. Please be aware that the Samba source code repository was migrated from CVS to Subversion on April 4, 2004. conf changes ---------------- Parameter Name Action -------------- ------ cups options New ea support New only user Deprecated store dos attributes New unicode Removed winbind nested groups New commits ------- o Jeremy Allison * Ensure that Kerberos mutex is always properly unlocked. Added hardlink_internals() code - UNIX extensions now use this as well. sym_link -> msdfs://server/share/path/in/share or sym_link -> msdfs:\\server\share\path\in\share. swap lookups for user and group - group will do an algorithmic lookup if it fails, user won't. o Timur Bakeyev * BUG 1144: only set --with-fhs when the argument is 'yes' * BUG 1152: Allow python modules to build despite libraries added to LDFLAGS instead of LDPATH. so names on FreeBSD 5x o Craig Barratt * BUG 389: Allow multiple exclude arguments with smbclient tar -Xr options (better support for Amanda backup client). o Andrew Bartlett * Include support for linking with cracklib for enforcing strong password changes. o Gerald Carter * BUG 850: Fix 'make installmodules' bug on True64. Also ensures that * BUG 1151: Ensure that winbindd users are passed through the username map. o Robert Dahlem * BUG 1048: Don't return short names when when 'mangled names = no' o Guenther Deschner * Remove hard coded attribute name in the ads ranged retrieval code. o Bostjan Golob * BUG 1046: Fix getpwent_list() so that the username is not overwritten by other fields. org (Landon Fuller) to fix user/group enumeration on systems whose libc does not call setgrent() before trying to enumerate users (ie FreeBSD 52). cifs to version 11 * Disable dev (MS_NODEV) on user mounts from cifs vfs. o Paul Green * Update VOS _POSIX_C_SOURCE macro to 200112L. ion by moving the first use of AC_CHECK_HEADERS so it is always executed. in to only use $BLDSHARED to select whether to build static or shared libraries. o Pat Haywarrd * Make the session_users list dynamic (max of 128K). o Cal Heldenbrand * Fix for for 'pam_smbpass migrate' functionality. o Chris Hertel * fix enumeration of shares 12 characters in length via smbclient. o Ulrich Holeschak * BUG 932: fix local password change using pam_smbpass o Krischan Jodies * Implement 'net rpc group delete' o John Klinger * Return NSS_SUCCESS once the max number of gids possible has been found in initgroups() on Solaris. o Volker Lendecke * Fix success message for net groupmap modify. o Derrell Lipman * Bug fixes and enhancements to libsmbclient library. o Jianliang Lu * Enforce the 'user must change password at next login' flag. o Stefan Metzmacher * Implement new VERSION schema based on subversion revision numbers. o James Peach * Correct check for printf() format when using the SGI MIPSPro compiler. o Kurt Pfeifle * Add example shell script for migrating drivers and printers from a Windows print server to a Samba print server using smbclient/rpcclient (examples/printing/VamireDriversFunctions). o Tim Potter * Fix logic bug in tdb non-blocking lock routines when errno == EAGAIN. h> in tdbdumpc * BUG 1155: enclose use of fchown() with guards. o Simo Source * Replace unknown_3 with fields_present in SAMR code. o Andrew Tridgell * Rewrote the AIX UESS backend for winbindd. o Jelmer Vernooij * Fix ETA Calculation when resuming downloads in smbget. o Shiro Yamada * BUG 1129: install image files for SWAT. This is the version that all production Samba servers should be running for all current bug-fixes. This will cause authentication to fail for such accounts. If you have valid passwords that meet this criteria, you must update the last change time to a non-zero value. If you do not, then 'pdbedit --force-initialized-passwords' will disable these accounts and reset the password hashes to a string of X's. The list of changes per contributor are as follows: o Jeremy Allison * Added paranoia checks in parsing code. o Andrew Bartlett * Ensure that changes to uninitialized passwords in ldapsam are written to the DIT. o Steve French * Added missing nosetuid and noexec options. o Bostjan Golob * BUG 1046: Don't overwrite usernames of entries returned by getpwent_list(). o Sebastian Krahmer * Fixed potential crash bug in NTLMSSP parsing code. o Tim Potter * Fixed logic in tdb_brlock error checking. o Urban Widmark * Set nosuid,nodev flags in smbmnt by default. Samba servers running 302 are not vulnerable to this bug regardless of whether or not pdbedit has been used to sanitize the passdb backend. Some of the more visible bugs in 301 addressed in the 302 release include: Joining a Samba domain from Pre-SP2 Windows 2000 clients. Kerberos failures due to an invalid in memory keytab detection test. Better separation of WINS and DNS queries for domain controllers. Output formatting fixes for smbclient for better compatibility with scripts based on the 22 version. conf changes ---------------- Parameter Name Action -------------- ------ ldap replication sleep New read size removed (unused) source environment removed (unused) commits ------- Please refer to the CVS log for the SAMBA_3_0 branch for complete details. The list of changes per contributor are as follows: o Jeremy Allison * Revert change that broke Exchange clear text samlogons. o Petri Asikainen * BUG 330, 387:Fix single valued attribute updates when working with Novell NDS. o Andrew Bartlett * Correctly handle per-pipe NTLMSSP inside a NULL session. o Justin Baugh * BUG 948: Implement missing functions required for FreeBSD nss_winbind support. o Alexander Bokovoy * BUG 922: Make sure enable fast path for strlower_m() and strupper_m(). o Luca Bolcioni * Fix crash when using 'security...