Samba 2.2.7 Oddities

Michael B Allen mba2000 at ioplex.com
Thu Nov 6 06:27:50 GMT 2003


I noticed two entirly unrelated strange things about Samba
2.2.7-security-rollup-fix today.

First, you get Access denied trying to delete a file if it was previously
read-only and changed to non-read-only using TRANS2_SET_FILE_INFORMATION
*and* bit 0x80 (ATTR_NORMAL) in searchAttributes of the SMB_COM_DELETE
request is not set. If ATTR_NORMAL is set the subsequent delete works. NT
4.0 has no problem with ATTR_NORMAL on or off.

Second, with the following config:

[global]
   workgroup = NYCRSCH
   preferred master = no
   local master = no
   server string = Samba Server
   printcap name = /etc/printcap
   load printers = no
   log file = /var/log/samba/%m.log
   max log size = 0
   security = user
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   dns proxy = no
   wins server = 147.135.97.64
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
   pam password change = yes
   obey pam restrictions = yes
   host msdfs = yes

[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775

[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes
[dfs]
   comment = Public Stuff
   path = /home/miallen/tmp/dfs
   public = yes
   writable = yes
   printable = no
   msdfs root = yes

listing subdirectories in tmp would list the contents of tmp. The
subdirectory does not even need to exist. Perhaps all the 'tmp's are
getting crossed?

Just FYI,

Mike

-- 
A program should be written to  model the concepts of the task it
performs rather than the physical world or a process because this
maximizes the  potential for it  to be applied  to tasks that are
conceptually similar and, more  important, to tasks that have not
yet been conceived.






More information about the samba-technical mailing list