topic Re: cifsmount security problem in Operating System - HP-UX

cifsmount security problem

wvsa — Mon, 28 Feb 2005 13:34:18 GMT

Good morning fellow admins;

After successfully mounting to a NT server with the following command:
cifsmount //sarah/vendor /wv/sarah -U vendor -P WVUS@Vendor$ I noticed that only root has permissions to the /wv/sarah directory, as a matter of fact logging as myself on Malachi (HPUX server) and changing to the wv directory I don't even see the sarah directory. If I log in as root I see the sarah directory underneath the wv directory, I can even cd into the sarah directory and see files.

What am I missing? Thank you for your input

WVSA

Re: cifsmount security problem

RAC_1 — Mon, 28 Feb 2005 13:57:22 GMT

What are the perms on /wv/sarah? also perms for the windows share?? Any directive as invalid, valid users??

Re: cifsmount security problem

Steven E. Protter — Mon, 28 Feb 2005 16:44:46 GMT

root user should be able to see anything, any file go anywhere. Thats normal.

Malachi (HPUX server) and changing to the wv directory I don't even see the sarah directory. If I log in as root I see the sarah directory underneath the wv directory, I can even cd into the sarah directory and see files.

Normal users should not be able to see anything if they don't own the files.

Once you look at permissions or post them, I think we will find a normal operation here unless you are normally an admin/root user, meaning your user id is zero.

SEP

Re: cifsmount security problem

Darren Prior — Tue, 01 Mar 2005 05:53:27 GMT

Hi,

When you ran that cifsmount command root was authenticated to the NT server. If you want other users to be able to access the share you will need to either use cifslogin for each user, or investigate guestUser in the configuration file. Both of these are documented in the CIFS client manual - available on your system or from http://docs.hp.com

regards,

Darren.