Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: root access for ALL windows users (update)



I've been trying to go through the logs to figure out what is happening. I came across several strange things. One that especially stood out is this one.

[2004/10/27 16:26:13, 0] /SourceCache/samba/samba-56/samba/source/lib/substitute.c: alloc_sub_basic(500)
alloc_sub_basic: NULL source string! This should not happen


There are also numerous mentions of user succesfully logged in using dsAuthMethodStandard
followed a few lines later by this line


[2004/10/27 16:34:52, 0] /SourceCache/samba/samba-56/samba/source/smbd/service.c: set_admin_user(321)
test1 logged in as admin user (root privileges)


It is basically mapping all of my Windows users to root users.
Anyone ever seen this?

I am about to stop and start the service but I have users that I can't kick out right now. Luckily we only have about 50 users on this server right now but we will soon have 400 Windows users. This could be really dangerous if 400 users all had root access to each others home folders.

Thanks,
Tim



Tim David
Senior Systems Administrator
University of Central Florida
College of Education
email@hidden
(407) 823-1783


On Oct 27, 2004, at 11:31 AM, Tim David wrote:

With no warning at all, all of my Windows users have full read write access to all user folders and all shared folders. All permissions are correct on the server itself and Macs are still blocked as expected.
Nothing has changed no the server as far as permissions. Everything has been the same for several weeks. The only thing that was done is we added one new server admin. The only thing he's done in this time is change one user password.


I check every folder and nothing has been changed from what I can tell.

Any ideas on why all of the sudden Windows users have root access to the server? (at least to my Home folders share and Shared folders share)

any ideas would be greatly appreciated.
Thanks,
Tim



Tim David
Senior Systems Administrator
University of Central Florida
College of Education
email@hidden
(407) 823-1783

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/ email@hidden


This email sent to email@hidden

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Read/Write for ALL windows users (From: Tim David <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.