topic Re: Samba smbnull account in Operating System - HP-UX

Samba smbnull account

RJA — Tue, 17 Apr 2007 12:36:08 GMT

On all but one of my servers, the account smbnull has this entry in the /tcb/fles/auth/s/smbnull file:

:u_pwd=*:\

Does this just mean that the account is disabled?

The other server has the following entry:

:u_pwd=:\

This is being flagged by the security team as negative due to a null passwd. Can I just change this to:

:u_pwd=*:\

Thanks

Re: Samba smbnull account

Aussan — Tue, 17 Apr 2007 12:51:13 GMT

u_pwd=*:\ is setting the password to *, which means it's locked, but for smbnull it should be * as you are not using the smbnull to login

Re: Samba smbnull account

Marco A. — Tue, 17 Apr 2007 12:56:28 GMT

The :u_pwd=:\ means that the user has not password, the * means that for the security level you are using the /etc/shadow file , you need to check the /etc/shadow of the system in which appears in blank, if you see the encrypted password for that user, then you can put an * right there without any issues.

Regards

Re: Samba smbnull account

Steven E. Protter — Tue, 17 Apr 2007 12:58:23 GMT

Shalom,

This user must remain for samba to function. It has no rights and probably can't even log in.

SEP

Re: Samba smbnull account

Aussan — Tue, 17 Apr 2007 12:59:55 GMT

Marco the * for Shadow password is in /etc/passwd

this is the trusted system user security file in /tcb/files/auth/s/smbnull

the * in this case means account is locked

smbnull is a guest account, it's needed to make samba work, but not needed to login. as long as the account is there then it's ok,

Re: Samba smbnull account

IT Response — Tue, 17 Apr 2007 13:07:46 GMT

Yes, you are right with that!

Re: Samba smbnull account

RJA — Tue, 17 Apr 2007 14:14:34 GMT

Thanks all for the replies ..