Archive for the ‘OS Solaris 10’ Category

Bundesamt für Sicherheit in der Informationstechnik (BSI) – Schwachstelle bei Samba ≥ 4.0 ist für DoS-Attacken anfällig

Sonntag, Juli 5th, 2020

Abgesichert sind die Samba-Ausgaben 4.10.17, 4.11.11 und 4.12.4

Red Hat Enterprise Linux 7 & CentOS 7 Servers – useful yum command examples

Freitag, September 27th, 2019
To list all available security updates without installing them
# yum updateinfo list security all
# yum updateinfo security
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
              : manager
rhel-7-server-rpms                                       | 3.5 kB     00:00
(1/2): rhel-7-server-rpms/7Server/x86_64/updateinfo        | 3.4 MB   00:01
(2/2): rhel-7-server-rpms/7Server/x86_64/primary_db        |  62 MB   00:19
RHSA-2019:0194 Moderate/Sec.  bind-libs-32:9.9.4-73.el7_6.x86_64
RHSA-2019:1294 Important/Sec. bind-libs-32:9.9.4-74.el7_6.1.x86_64
RHSA-2019:2057 Moderate/Sec.  bind-libs-32:9.11.4-9.P2.el7.x86_64
# yum update –security
# yum update –security –exclude=kernel\*
# yum info samba
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
              : manager
Installed Packages
Name        : samba
Arch        : x86_64
Version     : 4.9.1
Release     : 6.el7
Size        : 1.9 M
Repo        : installed
From repo   : rhel-7-server-rpms
Summary     : Server and Client software to interoperate with Windows machines
URL         : http://www.samba.org/
License     : GPLv3+ and LGPLv3+
Description : Samba is the standard Windows interoperability suite of programs
            : for Linux and Unix.
# yum downgrade samba-4.9.1
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
No packages marked for update
# yum info openssl
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
              : manager
Installed Packages
Name        : openssl
Arch        : x86_64
Epoch       : 1
Version     : 1.0.2k
Release     : 19.el7
Size        : 814 k
Repo        : installed
From repo   : rhel-7-server-rpms
Summary     : Utilities from the general purpose cryptography library with TLS
            : implementation
URL         : http://www.openssl.org/
License     : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
            : between machines. OpenSSL includes a certificate management tool
            : and shared libraries which provide various cryptographic
            : algorithms and protocols.
# yum downgrade openssl-1.0.2k
# yum update samba -y
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
No packages marked for update
# yum update openssl -y
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
              : manager
Resolving Dependencies
–> Running transaction check
—> Package openssl.x86_64 1:1.0.2k-16.el7 will be updated
—> Package openssl.x86_64 1:1.0.2k-19.el7 will be an update
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-19.el7 for package: 1:openssl-1.0.2k-19.el7.x86_64
–> Running transaction check
—> Package openssl-libs.x86_64 1:1.0.2k-16.el7 will be updated
—> Package openssl-libs.x86_64 1:1.0.2k-19.el7 will be an update
–> Finished Dependency Resolution
Dependencies Resolved
============================================
 Package          Arch       Version               Repository              Size
============================================
Updating:
 openssl          x86_64     1:1.0.2k-19.el7       rhel-7-server-rpms     493 k
Updating for dependencies:
 openssl-libs     x86_64     1:1.0.2k-19.el7       rhel-7-server-rpms     1.2 M
Transaction Summary
============================================
Upgrade  1 Package (+1 Dependent package)
Total size: 1.7 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Updating   : 1:openssl-libs-1.0.2k-19.el7.x86_64                          1/4
  Updating   : 1:openssl-1.0.2k-19.el7.x86_64                               2/4
  Cleanup    : 1:openssl-1.0.2k-16.el7.x86_64                               3/4
  Cleanup    : 1:openssl-libs-1.0.2k-16.el7.x86_64                          4/4
  Verifying  : 1:openssl-libs-1.0.2k-19.el7.x86_64                          1/4
  Verifying  : 1:openssl-1.0.2k-19.el7.x86_64                               2/4
  Verifying  : 1:openssl-libs-1.0.2k-16.el7.x86_64                          3/4
  Verifying  : 1:openssl-1.0.2k-16.el7.x86_64                               4/4
Updated:
  openssl.x86_64 1:1.0.2k-19.el7
Dependency Updated:
  openssl-libs.x86_64 1:1.0.2k-19.el7
Complete!

Samba – Security Releases

Mittwoch, August 15th, 2018

Samba – Security Releases

 

Microsoft Windows 10 – a file level backup *.VHD to the NAS device running samba failed

Samstag, April 8th, 2017

Windows10_logo   The failure happens while the *.VHD file created by Windows Backup is mounted during backup. The *.VHD file is created as a sparse file and this is not supported by the native VHD driver and hence mounting of the .*VHD failed. The „strict allocate = yes“ option of Samba will force it to not have UNIX style behavior of creating sparse file

# vi smb.conf
[global]
strict allocate = yes

and enabling SMB Large MTU on Windows Clients

Samba 4.3.0 – mit mehr Active Directory

Mittwoch, September 9th, 2015

Samba_01

Oracle’s Sun Storage Archive Manager – optimized solution for lifecycle content

Mittwoch, Juni 29th, 2011

oracle_logo.jpg   Oracle´s Sun Storage Archive Manger is a proven solution for PACS systems and medical records or documents. This requires securely storing and accessing documents and records from multiple sources. Retention is the life of the patient plus several years. Comparison of archived records with current results is ongoing throughout the life of the patient

oracle_samfs_01.jpg

Solaris 10 / SUN SamFS 4.6 – The most southern SamFS installation

Sonntag, Januar 18th, 2009

SamFS bei 70 Grad Süd It´s about a SamFS installation on the Polarstern, a german research vessel

samfs_polarstern_01.jpg

Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Adding Devices to a Storage Pool

Donnerstag, Januar 1st, 2009

dynamically add space to a pool by adding a new top-level virtual device. This space is immediately available to all datasets within the pool. To add a new virtual device to a pool, use the „zpool add“ command

# zpool add samfs2_pool_1 c2t3d0
# zpool add samfs2_pool_2 c2t4d0

# zpool status samfs2_pool_1
pool: samfs2_pool_1
state: ONLINE
scrub: none requested
config:
NAME STATE READ WRITE CKSUM
samfs2_pool_1 ONLINE 0 0 0
c2t1d0 ONLINE 0 0 0
c2t3d0 ONLINE 0 0 0
errors: No known data errors

# zpool status samfs2_pool_2
pool: samfs2_pool_2
state: ONLINE
scrub: none requested
config:
NAME STATE READ WRITE CKSUM
samfs2_pool_2 ONLINE 0 0 0
c2t2d0 ONLINE 0 0 0
c2t4d0 ONLINE 0 0 0
errors: No known data errors

Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Planning Issues for the Recycling Process

Donnerstag, Januar 1st, 2009

Recycling is the process of reclaiming space on archive volumes. The recycler works with the archiver to reclaim the space occupied by unused archive copies. As users modify files, the archive copies associated with the old versions can be purged from the system

# cat /etc/opt/SUNWsamfs/archiver.cmd
interval=2m
fs = samfs1
logfile=/var/opt/SUNWsamfs/archiver/samfs1.log
arset1_dir01 dir01
1 30s
2 120s

arset1 .
1 30s
2 1200s

params
allsets -recycle_hwm 50 -recycle_mingain 50 -recycle_vsncount 1
endparams

vsns
arset1.1 dk disk11
arset1.2 dk disk21
arset1_dir01.1 dk disk12
arset1_dir01.2 dk disk22
samfs1.1 dk disk10
endvsns

-recycle_hwm 50 „high water mark “ – Percentage of the total storage space in the library that must be utilized before recycling will occur

-recycle_mingain 50 „minimum gain“ – Percentage of the VSN that must be expired archives before it can be recycled

-recycle_vsncount 1 – „VSN count“ – Maximum number of VSNs recycled in one recycler run

Creating a crontab File for the Recycler If the system is performing as expected, you are ready to make a crontab entry for the superuser to run the recycler periodically, every two hours or more, depending on your site’s conditions

# EDITOR=vi
# export EDITOR
# crontab -e

5 1,3,5,7,9,11,13,15,17,19,21,23 * * * /opt/SUNWsamfs/sbin/sam-recycler

Solaris 10 / SUN SamFS 4.6 – Working with SamFS / How to Migrate a SAM-FS File System

Dienstag, Dezember 30th, 2008

# /etc/init.d/samba stop
# samcmd arrun
# showqueue -v -f
Scan list
0 2009-10-20 07:50:16 background —- .
No archive requests
# cd /samfs-old

# samfsdump -f /spacious_directory/samfsdump -u# mount -F samfs samfs-new /samfs-new

# cd /samfs-new
# samfsrestore -f /spacious_directory/samfsdump

# samcmd m

# cd /samfs-new
# sls -D myfile
# cp newfile /samfs-new/newfile
# samcmd arrun
# samcmd a

Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Adds disk partitions to an existing SamFS Filesystem

Samstag, Dezember 27th, 2008

samfs1 10 ms samfs1
/dev/dsk/c1t4d0s2 11 md samfs1 on /dev/rdsk/c1t4d0s2

# umount samfs1
# samd stop

samfs1 10 ms samfs1
/dev/dsk/c1t4d0s2 11 md samfs1 on /dev/rdsk/c1t4d0s2
/dev/dsk/c1t5d0s2 12 md samfs1 on /dev/rdsk/c1t5d0s2

# samgrowfs samfs1
# mount samfs1

Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Command Reference

Samstag, Dezember 27th, 2008

samcmd                  Executes one samu operator interface utility command
samd                      Starts or stops robotic and removable media daemons
samexplorer            Generates a SamFS diagnostic report script
samfsconfig             Displays configuration information
samfsdump              Creates a dump file of a SamFS file system
samfsinfo                Displays the layout SamFS file system
samfsrestore           Restores a dump file of a SamFS file system
samgrowfs               Adds disk partitions to an existing Sun StorEdge
sammkfs                 Initializes a new file system from disk device
samu                      Invokes the full-screen, text-based operator interface
sam-recycler           Reclaims space used by expired archive copies

archiver                   syntax completeness check and semantic accuracy
showqueue              Displays the content of an archiver queue file

star                         Restores file data from archives.zpool                      configures ZFS storage pools

sundoku_01.jpg                  

Solaris 10 / SUN SamFS 4.6 – Working with SamFS

Freitag, Dezember 26th, 2008

# mkfile 10m /samfs1/testfile01

# sls -D testfile01
testfile01:
mode: -rw——T links: 1 owner: root group: root
length: 10485760 admin id: 0 inode: 1029.1
access: Dec 25 21:20 modification: Dec 25 21:20
changed: Dec 25 21:20 attributes: Dec 25 21:20
creation: Dec 25 21:20 residence: Dec 25 21:20

after some minutes …

# sls -D testfile01
testfile01:
mode: -rw——T links: 1 owner: root group: root
length: 10485760 admin id: 0 inode: 1029.1
archdone;
copy 1: —– Dec 25 21:31 0.1 dk disk01 f0
copy 2: —– Dec 25 21:50 0.1 dk disk03 f0
access: Dec 25 21:20 modification: Dec 25 21:20
changed: Dec 25 21:20 attributes: Dec 25 21:20
creation: Dec 25 21:20 residence: Dec 25 21:20

Solaris 10 / SUN SamFS 4.6 – Configuring disk archiving

Freitag, Dezember 26th, 2008

# cat /etc/opt/SUNWsamfs/diskvols.conf
disk11 /samfs1_pool_1/dir11
disk12 /samfs1_pool_1/dir12
disk13 /samfs1_pool_2/dir13

# cat /etc/opt/SUNWsamfs/archiver.cmd
interval=2m
fs = samfs1
logfile=/var/opt/SUNWsamfs/archiver/samfs1.log
arset1 .
1 30s
2 120s

params
allsets -recycle_hwm 50 -recycle_mingain 50 -recycle_vsncount 1
endparams


vsns
arset1.1 dk disk12
arset1.2 dk disk13
arset1_dir01.1 dk disk14
arset1_dir01.2 dk disk15
samfs1.1 dk disk11
endvsns

# samd config
Configuring SAM-FS

# archiver -lv
Reading ‚/etc/opt/SUNWsamfs/archiver.cmd‘.

#

Solaris 10 / SUN SamFS 4.6 – Configuring a SamFS filesystem /etc/vfstab

Freitag, Dezember 26th, 2008

#cat /etc/vfstab

samfs1 – /samfs1 samfs – yes high=80,low=60

# samd config
Configuring SAM-FS


# sammkfs samfs1
Building ’samfs1′ will destroy the contents of devices:
        /dev/zvol/dsk/samfs1_base/samfs1_base_1
Do you wish to continue? [y/N]y
total data kilobytes = 4194240
total data kilobytes free = 4192576

# mount /samfs1
# cd /samfs1

# samfsinfo samfs1
name: samfs1 version: 2
time: Sun Jan 25 20:15:11 CET 2009
count: 1
capacity: 00000000003fffc0 DAU: 64
space: 00000000003ff940
ord eq capacity space device
0 11 00000000003fffc0 00000000003ff940 /dev/zvol/dsk/samfs1_base/samfs1_base_1