I usually don't miss things BUT

CMH chouck at binghamton.edu
Fri Apr 15 16:53:49 CEST 2016


Laurent;

Thanks for that info, the first answer I have been able to get.
I did know it was protocol issue we were discussing that. If netbios 
turns out to need changes it feels like that could be an easier fix.

We use it to connect NIS/NFS disk space from a Sparc box to students 
using Windows machines in public general purpose 'labs'. The student 
that authenticates via AD to login the Windows computer doesn't start 
samba or cifs their piece of storage is available they choose to map it 
or not.

*CSW is not providing a patch for the version provided?**
**You mention you are no longer supporting samba for CSW do you know who 
is?**
*
The only patch I can find is one Oracle/Solaris provides but that of 
course is for a Solaris package which I am not using.  I am between a 
rock and a kettle!

And again thanks for taking the time to help me. Samba has beem 
something that I ran without issue.
I went back and looked I think it was run on this Sparc box since 2011 
without an issue.

On 04/15/2016 10:02 AM, Laurent Blume wrote:
> Le 2016/04/15 15:57 +0200, Cmh a écrit:
>> Thanks for that info, but I still am not sure I need to do anything
>> regarding the samba badlock issue.
>> It appears to be A Windows issue only.
> It's a protocol flaw, not an implementation error, so basically,
> anything using the protocol is at risk.
>
>> I have searched and asked and can't get an answer to confirm or deny that.
>> The good news is that samba can only be accessed internally, not outside
>> network connections.
> Pretty much, yes. It's a real issue, but it was overhyped from the
> start. Nobody in their right mind does CIFS over the internet, and if
> someone is in the position of doing an MITM in your local network, then
> you have some issues already. Still, it ought to be patched.
>
> Laurent

-- 
ITS Systems @ TTH
Craig M. Houck ><>
204B - 607 777 6827
We are only as good as the problems we solve.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opencsw.org/pipermail/users/attachments/20160415/57c2153e/attachment.html>


More information about the users mailing list