Re: [Bug 128548] Re: Enable net usershare?
If you are running Samba on a farm of servers, you are probably using configuration management system like Chef / Puppet / Ansible / etc, so changing a configuration setting should be part of your default practice to harden your servers?! Why does the default config matter so much? -- Sebastien E. > On May 3, 2022, at 08:20, Michael Tokarev <128...@bugs.launchpad.net> wrote: > > Hi here! > > What's the reason here to change the compile-time default value for the > usershare max shares (from 0 to 100) instead of just letting the admin > to configure this feature if they wants to? It is just a flip of a > single parameter in smb.conf. > > I for one have to disable this debian-enabled feature on every server we > have, and this is quite some of them. > > I'm considering to remove this change from the debian samba package > (with the adding of the NEWS item saying we're now in agreement with > upstream finally, after almost 15 years). What do you think? > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/128548 > > Title: > Enable net usershare? > > To manage notifications about this bug go to: > https://bugs.launchpad.net/ubuntu/+source/samba/+bug/128548/+subscriptions > -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/128548 Title: Enable net usershare? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/128548/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
This is being discussed on https://alioth- lists.debian.net/pipermail/pkg-samba-maint/2022-May/023421.html -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/128548 Title: Enable net usershare? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/128548/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Hi here! What's the reason here to change the compile-time default value for the usershare max shares (from 0 to 100) instead of just letting the admin to configure this feature if they wants to? It is just a flip of a single parameter in smb.conf. I for one have to disable this debian-enabled feature on every server we have, and this is quite some of them. I'm considering to remove this change from the debian samba package (with the adding of the NEWS item saying we're now in agreement with upstream finally, after almost 15 years). What do you think? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/128548 Title: Enable net usershare? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/128548/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Ubuntu) Status: Fix Released = Fix Committed ** Changed in: samba (Ubuntu) Status: Fix Committed = Fix Released -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Ubuntu) Status: Fix Released = Fix Committed ** Changed in: samba (Ubuntu) Status: Fix Committed = Fix Released -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
i want default is security = user, not security = share, because it is secure. But my system, when i create a share dir and use right click to make a dir shared. Check smb.conf file, security = share. how to fix this ? -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 128548] Re: Enable net usershare?
i want default is security = user, not security = share, because it is secure. But my system, when i create a share dir and use right click to make a dir shared. Check smb.conf file, security = share. how to fix this ? -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
samba (3.0.27a-1ubuntu1) hardy; urgency=low * Merge from debian unstable (LP: #165072), remaining changes: * debian/patches/VERSION.patch: - set SAMBA_VERSION_VENDOR_SUFFIX to Ubuntu * debian/control: - Remove type-handling (not used in Ubuntu) * debian/rules: - Remove type-handling. * debian/samba.init: - Ubuntu's log_progress_msg is a no-op, so to avoid confusion, don't say specifically which daemons we're handling. (LP #25803) * debian/smb.conf: - Add (Samba, Ubuntu) to server string. - Comment out the default [homes] shares and add more verbose comments to explain what they do and how they work (LP #27608). Also, add a comment about valid users = %S to show users how to restrict access to \\server\username to only username. - default passwd chat value is modified * debian/panic-action: - Alter the panic-action script to link to the samba bug reporting page on Launchpad. * debian/samba-common.config: - do not change priority to HIGH if dhclient3 is installed - use priority medium instead of high for the workgroup question * Set Ubuntu maintainer address. * Bugs fixed in Debian: - Enable net usershare (LP: #128548) * Ubuntu patches merged in Debian: * debian/smb.conf: - printer admin is a deprecated option, and is dropped completely from the examples. * debian/samba-common.templates: - Default workgroup value is now set to WORKGROUP; this is a change from previous Ubuntu versions which used MSHOME, but is consistent with the Samba upstream defaults and the default behavior for most versions of Windows. * Ubuntu patches dropped: * debian/rules: - Samba should not use --error-handler=true for its init script. * debian/samba-common.templates, debian/po/*.po: - unnecessary divergence from Debian debconf template which resulted in fuzzy translations; this is cleaned up now samba (3.0.27a-1) unstable; urgency=low [ Steve Langasek ] * New upstream release - fix regression with smbfs clients, introduced by the security fix in 3.0.27. Closes: #451839. - debian/patches/cifs-umount-trailing-slashes.patch: merged upstream. * Drop the deprecated printer admin example from the default smb.conf. Closes: #451273. * Add a *new* debian/patches/cups.patch to *enable* cups as the default printing system, because since the original introduction of this patch in Debian there was a regression upstream that caused cups to never be selected as the default print system. * Set the default value for the workgroup question to WORKGROUP in samba-common.templates, not just in the template smb.conf, so that the debconf question comes out right every time; and always treat this as a high-priority debconf question instead of selecting the priority based on whether there's an existing value, since there's now *always* an existing value but the value doesn't tell us anything meaningful about the user's preference. Closes: #451271. * Drop some code from samba.postinst that only applies to upgrades from pre-3.0 (i.e., pre-sarge) packages [ Christian Perrier ] * Update the built by part of README.debian * Remove the very outdated parts of README.debian samba (3.0.27-1) unstable; urgency=low * New upstream version - fixes a remote code execution vulnerability when running nmbd as a WINS server. (CVE-2007-5398; closes: #451385) - fixes a buffer overflow in nmbd when running as a domain controller during processing of GETDC logon server requests. (CVE-2007-4572) [ Steve Langasek ] * fhs.patch: net usershares should also be stored under /var/lib, not under /var/run. No transition handling in maintainer scripts, since this feature is not activated by default. * get_global_sam_sid-non-root.patch: avoid calling get_global_sam_sid() from smbpasswd -L or pam_smbpass when running as non-root, to avoid a foreseeable panic. Closes: #346547, #450738. * usershare.patch: enable user shares by default in the server with a default limit of 100, to support user shares on both upgrades and new installs with no need to munge config files. Thanks to Mathias Gug [EMAIL PROTECTED] for the patch. Closes: #443230. * On Ubuntu, support autopopulating the sambashare group using the existing members of the admin group; no equivalent handling is done on Debian, because there doesn't seem to be an appropriate template group we can use that wouldn't be considered a privilege escalation for those users. * Update Samba to explicitly use the C locale when doing password changes, to account for Linux-PAM's recently adopted i18n support. Closes: #451272. * Enforce creation of the pid directory (/var/run/samba) in the samba init script, for compatibility with systems that use a tmpfs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Debian) Status: Fix Committed = Fix Released -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Debian) Status: New = Fix Committed -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
had the same problem, but setting security=share withing Authenticiation in /etc/samba/smb.conf worked fine for me. source: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/32067 -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
had the same problem, but setting security=share within Authenticiation in /etc/samba/smb.conf worked fine for me. source: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/32067 -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Hardy material. ** Changed in: samba (Ubuntu) Target: None = later -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Works well for me, will it be comitted to the repository? -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Debian) Status: Unknown = New -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
I've attached a new debdiff that removes the smb.conf update in the postinst script, as suggested by sebastien above. ** Attachment added: samba_3.0.25b-1ubuntu5.debdiff http://launchpadlibrarian.net/9382896/samba_3.0.25b-1ubuntu5.debdiff -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
** Bug watch added: Debian Bug tracker #443230 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443230 ** Also affects: samba (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443230 Importance: Unknown Status: Unknown -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
On Tue, Aug 28, 2007 at 12:03:13PM -, Sebastien Estienne wrote: from the man of net usershare add: The default if no acl is given is Everyone:R, which means any authenticated user has read-only access. I see your problem. The reason is that S-1-1-0 apparantly is synonymous with Everyone, but the string Everyone is not actually recognized. I think this is mostly a documentation problem. It shouldn't say Everyone:R, when that's not actually the default. It could say that the default is that everyone has read access, but writing it in quotes is misleading. -- Soren Hansen Ubuntu Server Team http://www.ubuntu.com/ -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
On Tue, Aug 28, 2007 at 07:30:25PM -, Mathias Gug wrote: The vast majority of the users will have a modified smb.conf file, as the default one doesn't have any share defined. Thus, the majority of the users upgrading won't get the new functionality. Indeed. This is a common problem, actually. There are many features we add in each release cycle that will not be obvious on anything but fresh installs. This holds true for both server and desktop software and is rather unfortunate in both cases. I agree with seb128, though. Messing about with user's configuration files is error prone and frowned upon. I'm not sure how to handle it instead, though. -- Soren Hansen Ubuntu Server Team http://www.ubuntu.com/ -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
Le mercredi 29 août 2007 à 08:04 +, Soren Hansen a écrit : rather unfortunate in both cases. I agree with seb128, though. Messing about with user's configuration files is error prone and frowned upon. I'm not sure how to handle it instead, though. The usual way is to make it work for new configurations and add something to the gutsy notes for users upgrading -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
The patch works. what do you think about adding these 2 options: usershare allow guests = yes usershare owner only = yes the last one restricts the folders that a user can share to the folders that he owns, eg: he won't be able to share /etc . -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
I noticed something strange that may not be directly related to net usershare: from the man of net usershare add: The default if no acl is given is Everyone:R, which means any authenticated user has read-only access. so when i try to create a share without specifying the acl it's ok: net usershare add mytest /home/sebest/tmp/ tmp net usershare info mytest [mytest] path=/home/sebest/tmp/ comment=tmp usershare_acl=S-1-1-0:R guest_ok=n but when i try to force it to Everyone:R (the default value from the man): net usershare add mytest /home/sebest/tmp/ tmp Everyone:R net usershare add: cannot convert name Everyone to a SID. Wrong Password. Any idea where the issue comes from? i noticed that this fails too: net usersidlist [2007/08/28 14:01:56, 0] utils/net_rpc.c:net_usersidlist(4724) Could not get the user/sid list -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
I'm not sure that changing the configuration file on upgrade in the postinst the way it's done is a good idea. What if a sysadmin decided to remove those lines from the config file. Changing the package configuration should be enough, if users have not modified their configuration they will get the changes otherwise they should be able to do the change -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
On Tue, Aug 28, 2007 at 02:37:55PM -, Sebastien Bacher wrote: What if a sysadmin decided to remove those lines from the config file. May be the package version that we're upgrading from should be checked. Changing the package configuration should be enough, if users have not modified their configuration they will get the changes otherwise they should be able to do the change The vast majority of the users will have a modified smb.conf file, as the default one doesn't have any share defined. Thus, the majority of the users upgrading won't get the new functionality. -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
On Tue, Aug 21, 2007 at 10:45:03AM -, Daniel Holbach wrote: Søren: can you review the change and check if it fixes things for you? Actually, I didn't need it at all :) I just filed the bug based on someone (possibly Sebastien) in #ubuntu-server asking for it and I didn't have time to work on it just then. Sebastien: Could you see if the patch works for you? -- Soren Hansen Ubuntu Server Team http://www.ubuntu.com/ -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
How are we supposed to tell to the user that he must be part of a specific group to use this feature? Should he part of this group by default? (Like the audio group etc) or should we display a message when he installs nautilus-share? 2007/8/24, Soren Hansen [EMAIL PROTECTED]: On Tue, Aug 21, 2007 at 10:45:03AM -, Daniel Holbach wrote: Søren: can you review the change and check if it fixes things for you? Actually, I didn't need it at all :) I just filed the bug based on someone (possibly Sebastien) in #ubuntu-server asking for it and I didn't have time to work on it just then. Sebastien: Could you see if the patch works for you? -- Soren Hansen Ubuntu Server Team http://www.ubuntu.com/ -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a direct subscriber of the bug. -- Sebastien Estienne -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Why not use pop up notification when installing nautilus-share like notification when firefox is updated ?! This notification should say : Nautilus-share have created a new group called smbshare If you want to share files please add yourself in this group and logout/login (Système/Administration/USers and groups) -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 128548] Re: Enable net usershare?
Another solution that was discussed with seb128 was to add a new user privilege in the 'user and group' application. -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
** Changed in: samba (Ubuntu) Assignee: (unassigned) = Soren Hansen -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Søren: can you review the change and check if it fixes things for you? -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
I've attached a debdiff that enables net usershare. ** Attachment added: samba_3.0.25b-1ubuntu3.debdiff http://launchpadlibrarian.net/8822963/samba_3.0.25b-1ubuntu3.debdiff ** Changed in: samba (Ubuntu) Importance: Undecided = Wishlist Status: New = In Progress -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 128548] Re: Enable net usershare?
Nautilus-share is a nautilus extension that depends on this functionnality: http://packages.ubuntu.com/feisty/gnome/nautilus-share -- Enable net usershare? https://bugs.launchpad.net/bugs/128548 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
