Ngaba usebenzisa iSamba? Kuya kufuneka uhlaziye kuhlobo olutsha lweSamba 4.11.2

Kungekudala ababhekisi phambili ngasemva Iprojekthi yeSamba ibhengeziwe ngengxelo ukukhutshwa kwe Inguqulelo entsha yokulungisa umthetho we Samba, ifikelela kwinguqulelo yayo entsha 4.11.2.

Kulungiselelwe abo bangaziyo ngeSamba Kuya kufuneka bayazi ukuba le nto ngumiliselo lwasimahla lweMicrosoft yeWindows yokwabelana ngomgaqo (eyayibizwa ngokuba yi-SMB, esandula ukubizwa nge-CIFS) yeenkqubo ezifana ne-UNIX. Ngale ndlela, kunokwenzeka ziphi iikhompyutha ngeGNU / Linux, iMac OS X okanye iUnix ngokubanzi jonga njengeeseva okanye wenze njengabaxhasi kwinethiwekhi yeWindows.

Samba Ikwavumela abasebenzisi bokuqinisekisa njengoMlawuli oPhezulu weDomain (PDC), njengelungu lommandla nanjengendawo esebenzayo yeDomain Directory yewebhu ezisekwe kwiWindows; Ngaphandle kokukwazi ukuhambisa imigca yokuprinta, iirejista ezabelwana ngazo kunye nokuqinisekisa ngoovimba bazo bomsebenzisi.

Phakathi kweenkqubo ezifana ne-Unix apho i-Samba inokuqhutywa khona, kukho ulwabiwo lwe-GNU / Linux, iSolaris kunye nezahluka ezahlukeneyo ze-BSD, phakathi kwazo esinokufumana i-Apple's Mac OS X Server.

Malunga neSamba 4.11.2

Le nguqulo intsha ye I-Samba 4.11.2 yinguqu echanekileyo, eyakhululwa ukuze ndikwazi ukujongana neminye imiba yezokhuseleko ezazisiwe kumgaqo olandelwayo. Apho ubungozi buqwalaselwe khona:

•  I-CVE-2019-10218: Iiseva ezinobungozi zinokubangela ukuba ikhowudi yomthengi weSamba ibuyisele amagama efayile aqukethe iindlela zokwahlula ikhowudi yokubiza.
• I-CVE-2019-14833Isikripthi sokuqinisekisa segama eligqithisiweyo le-Samba AD DC alifumani password epheleleyo. Xa igama eligqithisiweyo linamagama ee-multi-byte (hayi i-ASCII), ukujonga iscript esigqithisiweyo asifumani mtambo wegama eligqibeleleyo.
• I-CVE-2019-14847-Umsebenzisi onemvume "yokufumana utshintsho" unokutshixa iserver ye-AD DC LDAP nge-dirsync.

Uyifaka njani okanye uyiphucula njani kwi-Samba 4.11.2 kwi-Ubuntu nakwiziphumo?

Ewe, kwabo banomdla wokukwazi ukufaka le nguqulo intsha yeSamba okanye bafuna ukuhlaziya ingxelo yabo yangaphambili kule intshaBangayenza ngokulandela amanyathelo esabelana ngawo ngezantsi.

Into yokuqala esiza kuyenza kukwabelana ngamanyathelo okufakwa kweSamba 4.11.2. Kuba uhlaziyo lukhutshwe kutshanje, ulwakhiwo olulungiselelwe Ubuntu alukaveliswa koovimba. Ke ufakelo luya kwenziwa kwikhowudi yemvelaphi.

Ngoku njengolwazi olongezelelweyo kubasebenzisi be-Ubuntu 18.04 LTS Banokusebenzisa indawo yokugcina eya kubanceda ukuba bafake uhlobo olutsha lwe-samba ngendlela elula.

Ukuyongeza, sichwetheza nje kwisiphelo sendlela:

sudo add-apt-repository ppa:linux-schools/samba-latest

sudo apt-get update

Kwaye singafaka isamba nge:

sudo apt install samba

Ukuphumla, kufuneka senze ukudityaniswa. Kuqala siza kukhuphela iphakheji yeSamba esinokuyifumana ngokuvula i-terminal (ungayenza ngokudibanisa i-Ctrl + Alt + T) kwaye kuyo siza kuchwetheza lo myalelo ulandelayo:

wget https://download.samba.org/pub/samba/stable/samba-4.11.2.tar.gz

Emva koko siza kukhupha iphakheji kunye:

tar -zxf samba-4.11.2.tar.gz

Singena kwifolda eyenziweyo nge:

cd samba-4.11.2

Ukuba ngaphakathi kuyo, siza kuqokelela iphakheji kwaye emva koko senze ufakelo. Into yokuqala ekufuneka siyenzile faka ukuxhomekeka okuthile:

sudo apt-get install acl attr autoconf bind9utils bison build-essential \

debhelper dnsutils docbook-xml docbook-xsl flex gdb libjansson-dev krb5-user \

libacl1-dev libaio-dev libarchive-dev libattr1-dev libblkid-dev libbsd-dev \

libcap-dev libcups2-dev libgnutls-dev libgpgme-dev libjson-perl \

libldap2-dev libncurses5-dev libpam0g-dev libparse-yapp-perl \

libpopt-dev libreadline-dev nettle-dev perl perl-modules-5.26 pkg-config \

python-all-dev python-crypto python-dbg python-dev python-dnspython \

python3-dnspython python-gpgme python3-gpgme python-markdown python3-markdown \

python3-dev xsltproc zlib1g-dev liblmdb-dev lmdb-utils

Uyenzile le nto ngoku siza kuchwetheza:

./configure --prefix=/usr/local

Ukuqala ngokudityaniswa siza kuchwetheza:

make

Ukuba yonke into ihambe kakuhle, ufakelo lwenziwa nge:

make install

Kwaye ekugqibeleni Masisete imeko eyahlukileyo kunye:

export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH

Gqibela yabo banoguqulelo oludala, yinguqulelo 4.11.1 leyo, banokufaka isicatshulwa ngokukhuphela nge:

wget https://download.samba.org/pub/samba/patches/samba-4.11.1-4.11.2.diffs.gz

Siyikhupha nge:

gzip -9 samba-4.11.1-4.11.2.diffs.gz

Sifaka isikhombisi:

cd samba-4.11.1-4.11.2.diffs

Kwaye sisebenzisa isiciko nge:

patch -p0 < samba-4.11.1-4.11.2.diffs

Kwaye ukulungele.