Abgesichert sind die Samba-Ausgaben 4.10.17, 4.11.11 und 4.12.4
Archive for the ‘OS Solaris 10’ Category
Bundesamt für Sicherheit in der Informationstechnik (BSI) – Schwachstelle bei Samba ≥ 4.0 ist für DoS-Attacken anfällig
Sonntag, Juli 5th, 2020Red Hat Enterprise Linux 7 & CentOS 7 Servers – useful yum command examples
Freitag, September 27th, 2019To list all available security updates without installing them
# yum updateinfo list security all
# yum updateinfo security
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
rhel-7-server-rpms | 3.5 kB 00:00
(1/2): rhel-7-server-rpms/7Server/x86_64/updateinfo | 3.4 MB 00:01
(2/2): rhel-7-server-rpms/7Server/x86_64/primary_db | 62 MB 00:19
RHSA-2019:0194 Moderate/Sec. bind-libs-32:9.9.4-73.el7_6.x86_64
RHSA-2019:1294 Important/Sec. bind-libs-32:9.9.4-74.el7_6.1.x86_64
RHSA-2019:2057 Moderate/Sec. bind-libs-32:9.11.4-9.P2.el7.x86_64
# yum update –security
# yum update –security –exclude=kernel\*
# yum info samba
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
Installed Packages
Name : samba
Arch : x86_64
Version : 4.9.1
Release : 6.el7
Size : 1.9 M
Repo : installed
From repo : rhel-7-server-rpms
Summary : Server and Client software to interoperate with Windows machines
URL : http://www.samba.org/
License : GPLv3+ and LGPLv3+
Description : Samba is the standard Windows interoperability suite of programs
: for Linux and Unix.
# yum downgrade samba-4.9.1
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
No packages marked for update
# yum info openssl
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
Installed Packages
Name : openssl
Arch : x86_64
Epoch : 1
Version : 1.0.2k
Release : 19.el7
Size : 814 k
Repo : installed
From repo : rhel-7-server-rpms
Summary : Utilities from the general purpose cryptography library with TLS
: implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
: between machines. OpenSSL includes a certificate management tool
: and shared libraries which provide various cryptographic
: algorithms and protocols.
# yum downgrade openssl-1.0.2k
# yum update samba -y
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
No packages marked for update
# yum update openssl -y
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-
: manager
Resolving Dependencies
–> Running transaction check
—> Package openssl.x86_64 1:1.0.2k-16.el7 will be updated
—> Package openssl.x86_64 1:1.0.2k-19.el7 will be an update
–> Processing Dependency: openssl-libs(x86-64) = 1:1.0.2k-19.el7 for package: 1:openssl-1.0.2k-19.el7.x86_64
–> Running transaction check
—> Package openssl-libs.x86_64 1:1.0.2k-16.el7 will be updated
—> Package openssl-libs.x86_64 1:1.0.2k-19.el7 will be an update
–> Finished Dependency Resolution
Dependencies Resolved
============================================
Package Arch Version Repository Size
============================================
Updating:
openssl x86_64 1:1.0.2k-19.el7 rhel-7-server-rpms 493 k
Updating for dependencies:
openssl-libs x86_64 1:1.0.2k-19.el7 rhel-7-server-rpms 1.2 M
Transaction Summary
============================================
Upgrade 1 Package (+1 Dependent package)
Total size: 1.7 M
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : 1:openssl-libs-1.0.2k-19.el7.x86_64 1/4
Updating : 1:openssl-1.0.2k-19.el7.x86_64 2/4
Cleanup : 1:openssl-1.0.2k-16.el7.x86_64 3/4
Cleanup : 1:openssl-libs-1.0.2k-16.el7.x86_64 4/4
Verifying : 1:openssl-libs-1.0.2k-19.el7.x86_64 1/4
Verifying : 1:openssl-1.0.2k-19.el7.x86_64 2/4
Verifying : 1:openssl-libs-1.0.2k-16.el7.x86_64 3/4
Verifying : 1:openssl-1.0.2k-16.el7.x86_64 4/4
Updated:
openssl.x86_64 1:1.0.2k-19.el7
Dependency Updated:
openssl-libs.x86_64 1:1.0.2k-19.el7
Complete!
Samba – Security Releases
Mittwoch, August 15th, 2018Samba – Security Releases
Microsoft Windows 10 – a file level backup *.VHD to the NAS device running samba failed
Samstag, April 8th, 2017
The failure happens while the *.VHD file created by Windows Backup is mounted during backup. The *.VHD file is created as a sparse file and this is not supported by the native VHD driver and hence mounting of the .*VHD failed. The „strict allocate = yes“ option of Samba will force it to not have UNIX style behavior of creating sparse file
# vi smb.conf
[global]
strict allocate = yes
and enabling SMB Large MTU on Windows Clients
Samba 4.3.0 – mit mehr Active Directory
Mittwoch, September 9th, 2015
Oracles Sun Storage Archive Manager – optimized solution for lifecycle content
Mittwoch, Juni 29th, 2011
Oracle´s Sun Storage Archive Manger is a proven solution for PACS systems and medical records or documents. This requires securely storing and accessing documents and records from multiple sources. Retention is the life of the patient plus several years. Comparison of archived records with current results is ongoing throughout the life of the patient
Solaris 10 / SUN SamFS 4.6 – The most southern SamFS installation
Sonntag, Januar 18th, 2009
Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Adding Devices to a Storage Pool
Donnerstag, Januar 1st, 2009dynamically add space to a pool by adding a new top-level virtual device. This space is immediately available to all datasets within the pool. To add a new virtual device to a pool, use the „zpool add“ command
# zpool add samfs2_pool_1 c2t3d0
# zpool add samfs2_pool_2 c2t4d0
# zpool status samfs2_pool_1
pool: samfs2_pool_1
state: ONLINE
scrub: none requested config:
NAME STATE READ WRITE CKSUM
samfs2_pool_1 ONLINE 0 0 0
c2t1d0 ONLINE 0 0 0
c2t3d0 ONLINE 0 0 0
errors: No known data errors
# zpool status samfs2_pool_2
pool: samfs2_pool_2
state: ONLINE
scrub: none requested
config:
NAME STATE READ WRITE CKSUM
samfs2_pool_2 ONLINE 0 0 0
c2t2d0 ONLINE 0 0 0
c2t4d0 ONLINE 0 0 0
errors: No known data errors
Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Planning Issues for the Recycling Process
Donnerstag, Januar 1st, 2009Recycling is the process of reclaiming space on archive volumes. The recycler works with the archiver to reclaim the space occupied by unused archive copies. As users modify files, the archive copies associated with the old versions can be purged from the system
# cat /etc/opt/SUNWsamfs/archiver.cmd
interval=2m
fs = samfs1
logfile=/var/opt/SUNWsamfs/archiver/samfs1.log
arset1_dir01 dir01
1 30s
2 120s
arset1 .
1 30s
2 1200s
params
allsets -recycle_hwm 50 -recycle_mingain 50 -recycle_vsncount 1
endparams
vsns
arset1.1 dk disk11
arset1.2 dk disk21
arset1_dir01.1 dk disk12
arset1_dir01.2 dk disk22
samfs1.1 dk disk10
endvsns
-recycle_hwm 50 „high water mark “ – Percentage of the total storage space in the library that must be utilized before recycling will occur
-recycle_mingain 50 „minimum gain“ – Percentage of the VSN that must be expired archives before it can be recycled
-recycle_vsncount 1 – „VSN count“ – Maximum number of VSNs recycled in one recycler run
Creating a crontab File for the Recycler If the system is performing as expected, you are ready to make a crontab entry for the superuser to run the recycler periodically, every two hours or more, depending on your site’s conditions
# EDITOR=vi
# export EDITOR
# crontab -e
…
5 1,3,5,7,9,11,13,15,17,19,21,23 * * * /opt/SUNWsamfs/sbin/sam-recycler
Solaris 10 / SUN SamFS 4.6 – Working with SamFS / How to Migrate a SAM-FS File System
Dienstag, Dezember 30th, 2008# /etc/init.d/samba stop
# samcmd arrun
# showqueue -v -f
Scan list
0 2009-10-20 07:50:16 background - .
No archive requests# cd /samfs-old
# samfsdump -f /spacious_directory/samfsdump -u# mount -F samfs samfs-new /samfs-new
# cd /samfs-new
# samfsrestore -f /spacious_directory/samfsdump
# samcmd m
# cd /samfs-new
# sls -D myfile
# cp newfile /samfs-new/newfile
# samcmd arrun
# samcmd a
Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Adds disk partitions to an existing SamFS Filesystem
Samstag, Dezember 27th, 2008samfs1 10 ms samfs1
/dev/dsk/c1t4d0s2 11 md samfs1 on /dev/rdsk/c1t4d0s2
# umount samfs1
# samd stop
samfs1 10 ms samfs1
/dev/dsk/c1t4d0s2 11 md samfs1 on /dev/rdsk/c1t4d0s2
/dev/dsk/c1t5d0s2 12 md samfs1 on /dev/rdsk/c1t5d0s2
# samgrowfs samfs1
# mount samfs1
Solaris 10 / SUN SamFS 4.6 – Working with SamFS / Command Reference
Samstag, Dezember 27th, 2008samcmd Executes one samu operator interface utility command
samd Starts or stops robotic and removable media daemons
samexplorer Generates a SamFS diagnostic report script
samfsconfig Displays configuration information
samfsdump Creates a dump file of a SamFS file system
samfsinfo Displays the layout SamFS file system
samfsrestore Restores a dump file of a SamFS file system
samgrowfs Adds disk partitions to an existing Sun StorEdge
sammkfs Initializes a new file system from disk device
samu Invokes the full-screen, text-based operator interface
sam-recycler Reclaims space used by expired archive copies
archiver syntax completeness check and semantic accuracy
showqueue Displays the content of an archiver queue file
star Restores file data from archives.zpool configures ZFS storage pools
Solaris 10 / SUN SamFS 4.6 – Working with SamFS
Freitag, Dezember 26th, 2008# mkfile 10m /samfs1/testfile01
# sls -D testfile01
testfile01:
mode: -rw——T links: 1 owner: root group: root
length: 10485760 admin id: 0 inode: 1029.1
access: Dec 25 21:20 modification: Dec 25 21:20
changed: Dec 25 21:20 attributes: Dec 25 21:20
creation: Dec 25 21:20 residence: Dec 25 21:20
after some minutes …
# sls -D testfile01
testfile01:
mode: -rw——T links: 1 owner: root group: root
length: 10485760 admin id: 0 inode: 1029.1
archdone;
copy 1: —– Dec 25 21:31 0.1 dk disk01 f0
copy 2: —– Dec 25 21:50 0.1 dk disk03 f0
access: Dec 25 21:20 modification: Dec 25 21:20
changed: Dec 25 21:20 attributes: Dec 25 21:20
creation: Dec 25 21:20 residence: Dec 25 21:20
Solaris 10 / SUN SamFS 4.6 – Configuring disk archiving
Freitag, Dezember 26th, 2008# cat /etc/opt/SUNWsamfs/diskvols.conf
disk11 /samfs1_pool_1/dir11
disk12 /samfs1_pool_1/dir12
disk13 /samfs1_pool_2/dir13
# cat /etc/opt/SUNWsamfs/archiver.cmd
interval=2m
fs = samfs1
logfile=/var/opt/SUNWsamfs/archiver/samfs1.log
arset1 .
1 30s
2 120s
params
allsets -recycle_hwm 50 -recycle_mingain 50 -recycle_vsncount 1
endparams
vsns
arset1.1 dk disk12
arset1.2 dk disk13
arset1_dir01.1 dk disk14
arset1_dir01.2 dk disk15
samfs1.1 dk disk11
endvsns
# samd config
Configuring SAM-FS
# archiver -lv
Reading ‚/etc/opt/SUNWsamfs/archiver.cmd‘.
…
#
Solaris 10 / SUN SamFS 4.6 – Configuring a SamFS filesystem /etc/vfstab
Freitag, Dezember 26th, 2008#cat /etc/vfstab
…
samfs1 – /samfs1 samfs – yes high=80,low=60
# samd config
Configuring SAM-FS
# sammkfs samfs1
Building ’samfs1′ will destroy the contents of devices:
/dev/zvol/dsk/samfs1_base/samfs1_base_1
Do you wish to continue? [y/N]y
total data kilobytes = 4194240
total data kilobytes free = 4192576
# mount /samfs1
# cd /samfs1
# samfsinfo samfs1
name: samfs1 version: 2
time: Sun Jan 25 20:15:11 CET 2009
count: 1
capacity: 00000000003fffc0 DAU: 64
space: 00000000003ff940
ord eq capacity space device
0 11 00000000003fffc0 00000000003ff940 /dev/zvol/dsk/samfs1_base/samfs1_base_1