Ngabe usebenzisa iSamba? kufanele uvuselele enguqulweni entsha yokulungisa ye-Samba 4.11.2

Muva nje Onjiniyela abasemuva wephrojekthi yeSamba emenyezelwe ngesitatimende ukukhishwa kwe- inguqulo entsha yokulungisa ye-Samba protocol, ifinyelela enguqulweni yayo entsha 4.11.2.

Okwalabo abangazi ngeSamba kufanele bazi ukuthi lokhu ukuqaliswa kwamahhala kwe-Microsoft Windows file protocol protocol (phambilini ebibizwa nge-SMB, esanda kuqanjwa kabusha yaba yi-CIFS) yezinhlelo ezifana ne-UNIX. Ngale ndlela, kungenzeka yini amakhompyutha nge-GNU / Linux, Mac OS X noma i-Unix ngokujwayelekile ibukeka njengamaseva noma yenza njengamakhasimende kumanethiwekhi weWindows.

Samba Iphinde ivumele abasebenzisi abasebenza ngokusemthethweni njenge-Main Domain Controller (PDC), njengelungu lesizinda futhi nanjengesizinda sohla lwemibhalo esisebenzayo samanethiwekhi asekelwe kwiWindows; Ngaphandle kokukwazi ukusebenzela ulayini wokuphrinta, izinkomba ezabiwe futhi uqinisekise ngesilondolozi sakho somsebenzisi.

Phakathi kwezinhlelo ezifana ne-Unix lapho i-Samba ingaqhutshwa khona, kukhona ukusatshalaliswa kwe-GNU / Linux, i-Solaris kanye nokuhlukahluka okuhlukile kwe-BSD, lapho singathola i-Apple Mac OS X Server.

Mayelana neSamba 4.11.2

Le nguqulo entsha ye ISamba 4.11.2 inguqulo yokulungisa, eyakhishwa ukwazi ukubhekana nezinkinga ezithile zokuphepha lokho kwethulwe kuhlelo olandelwayo. Lapho ubungozi babhekiswa khona:

•  I-CVE-2019-10218: Amaseva anonya angadala ukuthi ikhodi yekhasimende le-Samba ibuyise amagama wamafayela aqukethe izihlukanisi zendlela kwikhodi yokushaya.
• I-CVE-2019-14833- Isikripthi sokuqinisekisa iphasiwedi seSamba AD DC asitholi iphasiwedi ephelele. Lapho iphasiwedi iqukethe izinhlamvu zamabhayithi amaningi (hhayi i-ASCII), ukuhlola iskripthi sephasiwedi akutholi intambo ephelele yephasiwedi.
• I-CVE-2019-14847- Umsebenzisi onemvume "yokuthola ushintsho" angakhiya iseva ye-AD DC LDAP nge-dirsync.

/ Ungayifaka kanjani noma uyithuthukisele kanjani ku-Samba 4.11.2 ku-Ubuntu nakwizisusayo?

Yebo, kulabo abanentshisekelo yokukwazi ukufaka le nguqulo entsha yeSamba noma abafuna ukubuyekeza inguqulo yabo yangaphambilini kule entshaBangakwenza ngokulandela izinyathelo esabelana ngazo ngezansi.

Into yokuqala esizoyenza ukwabelana ngezinyathelo zokufakwa kwe-Samba 4.11.2. Ngoba isibuyekezo sikhishwe muva nje, Ukwakhiwa okulungiselelwe Ubuntu akukaze kwenziwe ezinqolobaneni. Ngakho-ke ukufakwa kuzokwenziwa kusuka kukhodi yomthombo.

Manje njengolwazi olungeziwe lwabasebenzisi be-Ubuntu 18.04 LTS bangasebenzisa okugciniwe okuzobasiza ukufaka inguqulo entsha ye-samba ngendlela elula.

Ukuyifaka, simane sithayiphe ukuphela:

sudo add-apt-repository ppa:linux-schools/samba-latest

sudo apt-get update

Futhi singafaka i-samba nge:

sudo apt install samba

Konke okunye, kufanele senze ukuhlanganiswa. Okokuqala sizolanda iphakethe leSamba esingayithola ngokuvula i-terminal (ungakwenza ngenhlanganisela yokhiye Ctrl + Alt + T) futhi kuyo sizothayipha umyalo olandelayo:

wget https://download.samba.org/pub/samba/stable/samba-4.11.2.tar.gz

Ngemuva kwalokho sizokhipha iphakethe nge:

tar -zxf samba-4.11.2.tar.gz

Sifaka ifolda eyenziwe nge:

cd samba-4.11.2

Ukuba ngaphakathi kuyo, sizohlanganisa iphakheji bese senza ukufakwa. Into yokuqala okufanele siyenze faka ukuncika okuthile:

sudo apt-get install acl attr autoconf bind9utils bison build-essential \

debhelper dnsutils docbook-xml docbook-xsl flex gdb libjansson-dev krb5-user \

libacl1-dev libaio-dev libarchive-dev libattr1-dev libblkid-dev libbsd-dev \

libcap-dev libcups2-dev libgnutls-dev libgpgme-dev libjson-perl \

libldap2-dev libncurses5-dev libpam0g-dev libparse-yapp-perl \

libpopt-dev libreadline-dev nettle-dev perl perl-modules-5.26 pkg-config \

python-all-dev python-crypto python-dbg python-dev python-dnspython \

python3-dnspython python-gpgme python3-gpgme python-markdown python3-markdown \

python3-dev xsltproc zlib1g-dev liblmdb-dev lmdb-utils

Kwenziwe lokhu manje sesizothayipha:

./configure --prefix=/usr/local

Ukuqala ngokuhlanganiswa sizokuthayipha:

make

Uma konke kuhambe kahle, ukufakwa kwenziwa nge:

make install

Futhi ekugcineni ake sisethe ukuguquguquka kwemvelo nge:

export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH

Okokugcina kulabo abanenguqulo endala, leyo nguqulo 4.11.1, bangafaka isichibi ngokulanda nge:

wget https://download.samba.org/pub/samba/patches/samba-4.11.1-4.11.2.diffs.gz

Siyikhipha nge:

gzip -9 samba-4.11.1-4.11.2.diffs.gz

Sifaka umkhombandlela:

cd samba-4.11.1-4.11.2.diffs

Futhi sisebenzisa isichibi nge:

patch -p0 < samba-4.11.1-4.11.2.diffs

Futhi ngomumo.