Operating System - HP-UX
1832750 Members
2896 Online
110044 Solutions
New Discussion

Re: cifsmount security problem

 
wvsa
Regular Advisor

cifsmount security problem

Good morning fellow admins;

After successfully mounting to a NT server with the following command:
cifsmount //sarah/vendor /wv/sarah -U vendor -P WVUS@Vendor$ I noticed that only root has permissions to the /wv/sarah directory, as a matter of fact logging as myself on Malachi (HPUX server) and changing to the wv directory I don't even see the sarah directory. If I log in as root I see the sarah directory underneath the wv directory, I can even cd into the sarah directory and see files.

What am I missing? Thank you for your input


WVSA
3 REPLIES 3
RAC_1
Honored Contributor

Re: cifsmount security problem

What are the perms on /wv/sarah? also perms for the windows share?? Any directive as invalid, valid users??
There is no substitute to HARDWORK
Steven E. Protter
Exalted Contributor

Re: cifsmount security problem

root user should be able to see anything, any file go anywhere. Thats normal.

Malachi (HPUX server) and changing to the wv directory I don't even see the sarah directory. If I log in as root I see the sarah directory underneath the wv directory, I can even cd into the sarah directory and see files.

Normal users should not be able to see anything if they don't own the files.

Once you look at permissions or post them, I think we will find a normal operation here unless you are normally an admin/root user, meaning your user id is zero.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Darren Prior
Honored Contributor

Re: cifsmount security problem

Hi,

When you ran that cifsmount command root was authenticated to the NT server. If you want other users to be able to access the share you will need to either use cifslogin for each user, or investigate guestUser in the configuration file. Both of these are documented in the CIFS client manual - available on your system or from http://docs.hp.com

regards,

Darren.
Calm down. It's only ones and zeros...