Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: root access for ALL windows users (update)



Tim David wrote:

I've been trying to go through the logs to figure out what is happening. I came across several strange things. One that especially stood out is this one.

[2004/10/27 16:26:13, 0] /SourceCache/samba/samba-56/samba/source/lib/substitute.c: alloc_sub_basic(500)
alloc_sub_basic: NULL source string! This should not happen


There are also numerous mentions of user succesfully logged in using dsAuthMethodStandard
followed a few lines later by this line


[2004/10/27 16:34:52, 0] /SourceCache/samba/samba-56/samba/source/smbd/service.c: set_admin_user(321)
test1 logged in as admin user (root privileges)


It is basically mapping all of my Windows users to root users.
Anyone ever seen this?

I am about to stop and start the service but I have users that I can't kick out right now. Luckily we only have about 50 users on this server right now but we will soon have 400 Windows users. This could be really dangerous if 400 users all had root access to each others home folders.

 I've never seen this, but it's definitely bad. My guess right now would be
 that it's actually a problem in the connection to the authentication system.

 Could you post more about your configuration?

 I'd also like to see /etc/smb.conf posted to check and see that there's
 no some accidentally brain-dead setting there.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Read/Write for ALL windows users (From: Tim David <email@hidden>)
 >Re: root access for ALL windows users (update) (From: Tim David <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.