Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

2007-02-14 Thread Eloy Paris
On Wed, Feb 14, 2007 at 07:32:45AM +0100, Christian Perrier wrote:
   Interesting spot. FWIW, we do provide a fedault [homes] share so that
   will probably happen with the defautl setup of the package.
  
  What about adding backup to invalid users in smb.conf fix this
  problem?
 
 
 For backup, yes, but I think this doesn't scale well. The problem
 could happen for any other system user with a valid home directory.
 
 This is why I committed a change adding valid users = %S to the
 [homes] share.

Makes sense. Cool fix. Thanks!

Cheers,

Eloy.-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

2007-02-13 Thread peloy
On Sat, Feb 10, 2007 at 04:47:46PM +0100, Christian Perrier wrote:
 Quoting Daniel Fernández ([EMAIL PROTECTED]):
  Package: samba
  Version: 3.0.23d-4
  Severity: normal
  
  Samba server list system files under backup share even whent backup
  share does not exist. However, the contents of the files cannot be
  readed. This bug has been found on etch and sarge systems, in amd64 and
  i386 architectures.
 
 
 OK, got it. The backup user on Debian systems has a valid home
 directory:
 
 [EMAIL PROTECTED]:/var/log/samba cd ~backup
 [EMAIL PROTECTED]:/var/backups
 
 
 Interesting spot. FWIW, we do provide a fedault [homes] share so that
 will probably happen with the defautl setup of the package.

What about adding backup to invalid users in smb.conf fix this
problem?

Cheers,

Eloy.-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

2007-02-13 Thread Daniel Fernández
 What about adding backup to invalid users in smb.conf fix this
 problem?

It will require to add all system users (I mean all the ones that are
in /etc/passwd and are not real users). The valid users = %S option
works well for me.

Daniel.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

2007-02-13 Thread Steve Langasek
On Tue, Feb 13, 2007 at 10:30:16AM -0500, [EMAIL PROTECTED] wrote:
 On Sat, Feb 10, 2007 at 04:47:46PM +0100, Christian Perrier wrote:
  Quoting Daniel Fernández ([EMAIL PROTECTED]):
   Package: samba
   Version: 3.0.23d-4
   Severity: normal

   Samba server list system files under backup share even whent backup
   share does not exist. However, the contents of the files cannot be
   readed. This bug has been found on etch and sarge systems, in amd64 and
   i386 architectures.

  OK, got it. The backup user on Debian systems has a valid home
  directory:

  [EMAIL PROTECTED]:/var/log/samba cd ~backup
  [EMAIL PROTECTED]:/var/backups

  Interesting spot. FWIW, we do provide a fedault [homes] share so that
  will probably happen with the defautl setup of the package.

 What about adding backup to invalid users in smb.conf fix this
 problem?

In this context, 'backup' isn't the name of the connecting user, so 'invalid
users' would have no effect.

The evident fix is the one offered by the Ubuntu packaging, to make [homes]
shares accessible by default only to the named user.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/



Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

2007-02-13 Thread Christian Perrier
  Interesting spot. FWIW, we do provide a fedault [homes] share so that
  will probably happen with the defautl setup of the package.
 
 What about adding backup to invalid users in smb.conf fix this
 problem?


For backup, yes, but I think this doesn't scale well. The problem
could happen for any other system user with a valid home directory.

This is why I committed a change adding valid users = %S to the
[homes] share.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#410308: samba: Samba listing system files under backup share

2007-02-10 Thread Christian Perrier
tags 4410308 confirmed
thanks

Quoting Daniel Fernández ([EMAIL PROTECTED]):
 Package: samba
 Version: 3.0.23d-4
 Severity: normal
 
 Samba server list system files under backup share even whent backup
 share does not exist. However, the contents of the files cannot be
 readed. This bug has been found on etch and sarge systems, in amd64 and
 i386 architectures.
 
 For reproduce the bug:


Actually, I didn't want to believe this, but apparently you're true:

[EMAIL PROTECTED]:~ smbclient -U bubulle //localhost/backup
Password:
Domain=[CC-MYKERINOS] OS=[Unix] Server=[Samba 3.0.24]
smb: \ dir
  .   D0  Tue Feb  6 05:34:37 2007
  ..  D0  Tue Jun 20 13:40:52 2006
  infodir.bak   9494  Fri Feb  9 15:38:35 2007
  passwd.bak2193  Sat Feb  3 16:56:52 2007
  group.bak  947  Tue Jan 16 08:00:08 2007
  shadow.bak1401  Sat Feb  3 16:56:52 2007
  gshadow.bak783  Tue Jan 16 08:00:08 2007
  smbpasswd.bak  107  Wed Nov 22 07:54:20 2006


So, now we have to find out why...:)




signature.asc
Description: Digital signature


Bug#410308: samba: Samba listing system files under backup share

2007-02-10 Thread Steve Langasek
On Sat, Feb 10, 2007 at 11:45:53AM +0100, Christian Perrier wrote:
 tags 4410308 confirmed
 thanks

 Quoting Daniel Fernández ([EMAIL PROTECTED]):
  Package: samba
  Version: 3.0.23d-4
  Severity: normal

  Samba server list system files under backup share even whent backup
  share does not exist. However, the contents of the files cannot be
  readed. This bug has been found on etch and sarge systems, in amd64 and
  i386 architectures.

  For reproduce the bug:

 Actually, I didn't want to believe this, but apparently you're true:

 [EMAIL PROTECTED]:~ smbclient -U bubulle //localhost/backup
 Password:
 Domain=[CC-MYKERINOS] OS=[Unix] Server=[Samba 3.0.24]
 smb: \ dir
   .   D0  Tue Feb  6 05:34:37 2007
   ..  D0  Tue Jun 20 13:40:52 2006
   infodir.bak   9494  Fri Feb  9 15:38:35 2007
   passwd.bak2193  Sat Feb  3 16:56:52 2007
   group.bak  947  Tue Jan 16 08:00:08 2007
   shadow.bak1401  Sat Feb  3 16:56:52 2007
   gshadow.bak783  Tue Jan 16 08:00:08 2007
   smbpasswd.bak  107  Wed Nov 22 07:54:20 2006

 So, now we have to find out why...:)

Because of the 'homes' share.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/



Bug#410308: samba: Samba listing system files under backup share

2007-02-10 Thread Christian Perrier
Quoting Daniel Fernández ([EMAIL PROTECTED]):
 Package: samba
 Version: 3.0.23d-4
 Severity: normal
 
 Samba server list system files under backup share even whent backup
 share does not exist. However, the contents of the files cannot be
 readed. This bug has been found on etch and sarge systems, in amd64 and
 i386 architectures.


OK, got it. The backup user on Debian systems has a valid home
directory:

[EMAIL PROTECTED]:/var/log/samba cd ~backup
[EMAIL PROTECTED]:/var/backups


Interesting spot. FWIW, we do provide a fedault [homes] share so that
will probably happen with the defautl setup of the package.




signature.asc
Description: Digital signature


Bug#410308: samba: Samba listing system files under backup share

2007-02-09 Thread Daniel Fernández
Package: samba
Version: 3.0.23d-4
Severity: normal

Samba server list system files under backup share even whent backup
share does not exist. However, the contents of the files cannot be
readed. This bug has been found on etch and sarge systems, in amd64 and
i386 architectures.

For reproduce the bug:

smbmount //server/backup /a_dir
ls -l /a_dir
-rwxr-xr-x  1 daniel daniel 954095 2007-02-05 01:00 dpkg.status.0
-rwxr-xr-x  1 daniel daniel 265053 2007-01-29 01:00 dpkg.status.1.gz
-rwxr-xr-x  1 daniel daniel 265055 2007-01-22 01:05 dpkg.status.2.gz
-rwxr-xr-x  1 daniel daniel 265090 2007-01-15 01:00 dpkg.status.3.gz
-rwxr-xr-x  1 daniel daniel 265095 2007-01-11 09:59 dpkg.status.4.gz
-rwxr-xr-x  1 daniel daniel 265091 2007-01-01 01:00 dpkg.status.5.gz
-rwxr-xr-x  1 daniel daniel 265088 2006-12-18 01:00 dpkg.status.6.gz
-rwxr-xr-x  1 daniel daniel745 2007-01-31 10:56 group.bak
-rwxr-xr-x  1 daniel daniel613 2007-01-31 10:56 gshadow.bak
-rwxr-xr-x  1 daniel daniel   1468 2005-11-04 18:59 inetd.conf.bak
-rwxr-xr-x  1 daniel daniel   5073 2006-12-11 01:01 infodir.bak
-rwxr-xr-x  1 daniel daniel   1492 2007-01-31 10:56 passwd.bak
-rwxr-xr-x  1 daniel daniel   1100 2007-01-31 10:56 shadow.bak

backup share does not exist in smb.conf

Thanks,
   Daniel.

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-amd64
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)

Versions of packages samba depends on:
ii  debconf  1.5.11  Debian configuration
management sy
ii  libacl1  2.2.41-1Access control list shared
library
ii  libattr1 2.4.32-1Extended attribute shared
library
ii  libc62.3.6.ds1-10GNU C Library: Shared
libraries
ii  libcomer 1.39+1.40-WIP-2006.11.14+dfsg-1 common error description
library
ii  libcupsy 1.2.7-4 Common UNIX Printing
System(tm) - 
ii  libgnutl 1.4.4-3 the GNU TLS library -
runtime libr
ii  libkrb53 1.4.4-6 MIT Kerberos runtime
libraries
ii  libldap2 2.1.30-13.2 OpenLDAP libraries
ii  libpam-m 0.79-4  Pluggable Authentication
Modules f
ii  libpam-r 0.79-4  Runtime support for the PAM
librar
ii  libpam0g 0.79-4  Pluggable Authentication
Modules l
ii  libpopt0 1.10-3  lib for parsing cmdline
parameters
ii  logrotat 3.7.1-3 Log rotation utility
ii  lsb-base 3.1-22  Linux Standard Base 3.1
init scrip
ii  netbase  4.29Basic TCP/IP networking
system
ii  procps   1:3.2.7-3   /proc file system utilities
ii  samba-co 3.0.23d-4   Samba common files used by
both th
ii  zlib1g   1:1.2.3-13  compression library -
runtime

Versions of packages samba recommends:
pn  smbldap-tools none (no description available)

-- debconf information:
  samba/run_mode: daemons
  samba/tdbsam: false
  samba/generate_smbpasswd: true





-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]