Ma isticmaashaa Samba? waa inaad cusbooneysiisaa nooca saxda ah ee Samba 4.11.2

Dhawaan horumariyayaal yaa gadaal ka taagan ee mashruuca Samba lagu dhawaaqay iyada oo qoraal lagu sii daayo nooc cusub oo sixitaan ah oo ku saabsan hab maamuuska Samba, gaarsiinta nuuca cusub 4.11.2.

Kuwa aan Samba ka aqoon waa inay ogaadaan in tan waa hirgelin bilaash ah borotokoolka Microsoft Windows faylalka wadaagista (oo hore loo oran jiray SMB, oo dhawaan loo beddelay CIFS) nidaamyada u eg UNIX. Sidan oo kale, waa suurtagal kumbiyuutarrada leh GNU / Linux, Mac OS X ama Unix guud ahaan u eg sida server ama u dhaqmaan sida macaamiisha shabakadaha Windows.

Samba Waxay sidoo kale u oggolaaneysaa xaqiijinta isticmaaleyaasha sida Maamulaha Domain Main (PDC), xubin xubin ahaan iyo xitaa sida cinwaan firfircoon oo loogu talagalay shabakadaha Windows-ku-saleysan; marka laga reebo inaad awood u leedahay inaad u adeegto safafka daabacan, tilmaamaha la wadaago oo aad ku xaqiijiso arjigaaga isticmaale.

Nidaamyada Unix-ka oo kale ah ee Samba lagu maamuli karo, waxaa ka mid ah qeybinta GNU / Linux, Solaris iyo noocyo kala duwan oo BSD ah, kuwaas oo aan ka heli karno Apple's Mac OS X Server.

Ku saabsan Samba 4.11.2

Noocaan cusub ee Samba 4.11.2 waa nooc sixitaan ah, oo la sii daayay inuu wax ka qaban karo arrimaha amniga qaarkood taas oo lagu soo bandhigay baratakoolka. Kuwaasoo nuglaanta wax looga qabtay:

•  CVE-2019-10218: Server-yada xaasidnimada leh waxay sababi karaan koodhka macmiilka Samba inuu soo celiyo magacyada faylka ee ay ku jiraan kala-gooyeyaasha dariiqa furaha wicitaanka.
• CVE-2019-14833- Qoraalka xaqiijinta lambarka samba AD DC ma helo lambarka sirta ah oo dhammaystiran. Marka erayga sirta ahi ka kooban yahay astaamo dhowr ah (oo aan ahayn ASCII), hubinta qoraalka sirta ah ma helayo xarigga sirta oo dhammaystiran.
• CVE-2019-14847- Isticmaalaha leh "hel isbeddellada" oggolaanshaha wuxuu ku xiri karaa adeegga AD DC LDAP adoo adeegsanaya dirsync.

Sidee loo rakibaa ama loogu casriyeeyaa Samba 4.11.2 Ubuntu iyo derivatives?

Hagaag, kuwa xiiseynaya inay awoodaan inay soo rogaan nuqulkan cusub ee Samba ama doonaya inay cusbooneysiiyaan noocoodii hore midkan cusub.Waxay ku samayn karaan iyagoo raacaya tallaabooyinka aan wadaagno xagga hoose.

Waxa ugu horreeya ee aan sameyn doonno waa wadaagista tillaabooyinka rakibidda Samba 4.11.2. Sababtoo ah cusbooneysiinta ayaa la sii daayay dhowaan, dhismayaasha loo diyaariyay Ubuntu wali lama abuurin keydadka. Marka rakibidda waxaa laga sameyn doonaa lambarka isha.

Hadda sida macluumaad dheeraad ah oo loogu talagalay dadka isticmaala Ubuntu 18.04 LTS waxay isticmaali karaan bakhaar iyaga ka caawin doona inay ku rakibaan nooca cusub ee samba qaab fudud.

Ku darista, waxaan ku qornaa terminal:

sudo add-apt-repository ppa:linux-schools/samba-latest

sudo apt-get update

Oo waxaan ku rakibi karnaa samba:

sudo apt install samba

Inta soo hartay, waa inaan sameynaa isku duwidda. Aynu marka hore soo dejino xirmada Samba taas oo aan ku heli karno furitaanka terminal (waxaad ku sameyn kartaa isku darka furaha Ctrl + Alt + T) dhexdeeda waxaan ku qori doonnaa amarka soo socda:

wget https://download.samba.org/pub/samba/stable/samba-4.11.2.tar.gz

Intaa ka dib waxaan soo saaraynaa xirmada:

tar -zxf samba-4.11.2.tar.gz

Waxaan galnaa galka lagu abuuray:

cd samba-4.11.2

Anaga oo ku dhex jirna, waxaan isku soo uruurineynaa xirmada ka dibna waxaan rabeynaa rakibida. Waxa ugu horeeya ee ay tahay inaan sameyno ayaa ah Ku rakib qaar ku tiirsanaanta:

sudo apt-get install acl attr autoconf bind9utils bison build-essential \

debhelper dnsutils docbook-xml docbook-xsl flex gdb libjansson-dev krb5-user \

libacl1-dev libaio-dev libarchive-dev libattr1-dev libblkid-dev libbsd-dev \

libcap-dev libcups2-dev libgnutls-dev libgpgme-dev libjson-perl \

libldap2-dev libncurses5-dev libpam0g-dev libparse-yapp-perl \

libpopt-dev libreadline-dev nettle-dev perl perl-modules-5.26 pkg-config \

python-all-dev python-crypto python-dbg python-dev python-dnspython \

python3-dnspython python-gpgme python3-gpgme python-markdown python3-markdown \

python3-dev xsltproc zlib1g-dev liblmdb-dev lmdb-utils

Tan tan hadda waan sameynay waxaan qori doonnaa:

./configure --prefix=/usr/local

Si aan uga bilowno isku soo ururinta waxaan qoreynaa:

make

Haddii wax walboo hagaagaan, rakibaadda waxaa lagu fuliyaa:

make install

Ugu dambeyntii aan ku dejino isbeddelada deegaanka:

export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH

Finalmente kuwa leh nooc duug ah, taasi waa nooca 4.11.1, waxay dalban karaan balastarka iyaga oo ku soo dejinaya:

wget https://download.samba.org/pub/samba/patches/samba-4.11.1-4.11.2.diffs.gz

Waxaan ku soo saareynaa:

gzip -9 samba-4.11.1-4.11.2.diffs.gz

Waxaan galnaa galka:

cd samba-4.11.1-4.11.2.diffs

Waxaanan ku dabaqeynaa balastarka:

patch -p0 < samba-4.11.1-4.11.2.diffs

Oo diyaar.