Samba ndeye multifunctional server chigadzirwa, iyo inopawo kushandiswa kwefaira server, kudhinda sevhisi, uye identity server (winbind).
The kuburitswa kweiyo vhezheni itsva yeSamba 4.18.0, iyo yakaenderera mberi nebasa re kero yekuita regressions paSMB maseva inogarwa semhedzisiro yekuwedzera kwedziviriro kubva kune yekufananidzira link manipulation vulnerabilities.
Pamusoro pebasa rakaitwa mukuburitswa kwekupedzisira kudzikisa nharembozha kana uchitsvaga zita redhairekitori uye kurega kushandisa zviitiko zvekumuka paunenge uchigadzira mashandiro akafanana, vhezheni 4.18. kuderedzwa kukiya kugadzirisa pamusoro nokuda kwekushanda pamwe chete panzira dzefaira nechikamu chetatu.
Nekuda kweizvozvo, kuita kwefaira kuvhurika uye kuvharika mashandiro kwakaunzwa kusvika padanho reSamba 4.12.
Main nyowani maficha eSamba 4.18.0
Mune iyi ichangobva kuburitswa vhezheni yeSamba 4.18.0, iyo samba-chokushandisa iko zvino inoratidza mamwe mapfupi uye echokwadi mameseji ekukanganisa.
Pane kugadzira call trace ichiratidza chinzvimbo mukodhi kwakaitika dambudziko, izvo zvaisaita nguva dzose kuti zvikwanise kunzwisisa nekukurumidza izvo zvisina kunaka, mushanduro itsva, kuburitsa kunogumira kune tsananguro yechikonzero chekukanganisa (semuenzaniso, zita rezita risiri iro kana password, zita risiri iro refaira rine LDB dhatabhesi, risipo zita muDNS, unreachable network, invalid command line arguments, etc.).
Kunze kwaizvozvo, kana nyaya isingazivikanwe yawanikwa, tsvakiridzo yakazara ichiri kupihwa kubva kuPython stack, iyo inogona kuwanikwa zvakare neiyo '-d3' sarudzo. Ungangoda ruzivo urwu kuti uwane chakonzera dambudziko pawebhu kana kuwedzera kune chiziviso chekukanganisa chaunotumira.
Chimwe chitsva chinounzwa mune iyi vhezheni itsva yeSamba 4.18.0, ndeyekuti tYese samba-chishandiso mirairo inotsigira sarudzo "-color = yes | kwete | auto" kudzora kuburitsa kuburitsa. Mu "-color = auto" modhi, iyo yakasarudzika inoshandiswa chete kana yatumirwa kune terminal. 'nguva dzose' uye 'kumanikidza' pane 'hongu', 'hazvina' uye 'hapana' pane 'kwete', 'tty' uye 'kana-tty' pane 'auto'.
Tinogona zvakare kuwana izvo yakawedzera tsigiro yeNO_COLOR nharaunda shanduko kudzima kuburitsa kuburitsa mumamiriro ezvinhu apo ANSI mavara macode anoshandiswa kana iyo "-color = auto" modhi iri kushanda.
Yeimwe shanduko inomira mushanduro iyi nyowani:
- Murairo mutsva we "dsacl Delete" wawedzerwa kune samba chishandiso kudzima access control list (ACE) zvinyorwa.
- Yakawedzerwa sarudzo "-change-secret-at= »kune wbinfo command kutsanangura iyo domain controller pairi kuita iyo password shanduko mashandiro.
- Yakawedzera imwe parameter "acl_xattr:security_acl_name" ku smb.conf kushandura zita rechimiro chakawedzerwa (xattr) chinoshandiswa kuchengeta NT ACL.
- Nenguva isipi, security.NTACL attribute inonamirwa kumafaira nemadhairekitori, kupinda uko kunorambirwa nevashandisiwo zvavo.
- Kana iwe ukatumidza zita rekuchengetedza ACL hunhu, haizoshandiswe pamusoro peSMB, asi ichave inowanikwa munharaunda kune chero mushandisi, izvo zvinoda kunzwisiswa kwezvingangoita zvakashata chengetedzo kukanganisa.
- Yakawedzera tsigiro yepassword hash kuwiriranisa pakati peSamba-based Active Directory domain uye Azure Active Directory (Office365) gore.
Chekupedzisira, kana iwe uchida kukwanisa kuziva zvakawanda nezvazvo, unogona kubvunza iwo ruzivo mu inotevera chinongedzo.
Maitiro ekuisa kana kusimudzira kuSamba paUbuntu uye zvinobva?
Zvakanaka, kune avo vanofarira kugona kuisa iyi nyowani vhezheni yeSamba kana kuda kuvandudza vhezheni yavo yapfuura kune iyi nyowaniVanogona kuzviita nekutevera nhanho dzatinogovana pazasi.
Zvakakodzera kutaura kuti, kunyangwe samba inosanganisirwa muUbuntu repositories, iwe unofanirwa kuziva kuti mapakeji haana kuvandudzwa kana shanduro itsva yaburitswa, saka mune ino kesi tinosarudza kushandisa repository.
Chinhu chekutanga chatichaita kuvhura terminal uye mairi tichanyora murairo unotevera wekuwedzera repository kune system:
sudo add-apt-repository ppa:linux-schools/samba-latest sudo apt-get update
Kana repository yawedzerwa, tinoenderera mberi nekuisa samba muhurongwa uye nokuda kweizvi, tinongonyora murairo unotevera:
sudo apt install samba
Kana iwe uchitova neyakare vhezheni yakaiswa, ichagadziridzwa otomatiki.