HostedDB - Dedicated UNIX Servers

Securing-Optimizing-RH-Linux-1_2_421
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca © Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ® 421 - Include PAM password database support for better security.  - Include experimental MMAP support to improve Samba performance. Step 2 Now, we must install Samba in the Linux server: [root@deep source]#  make all [root@deep source]#  make install [root@deep source]#  install -m 755 script/mksmbpasswd.sh  /usr/bin/ [root@deep source]#  rm -rf /usr/share/swat/ (if like me, you don’t like to configure Samba in HTML). [root@deep source]#  rm -f /usr/sbin/swat [root@deep source]#  rm -f /usr/man/man8/swat.8  [root@deep source]#  mkdir -p /var/lock/samba (only require if you are the intention to use printer sharing). [root@deep source]#  mkdir -p /var/spool/samba (only require if you are the intention to use printer sharing). [root@deep source]#  chmod 1777 /var/spool/samba/ (only require if you are the intention to use printer sharing). The “install” command would install the script “mksmbpasswd.sh” under “/usr/bin/” directory. This script is needed to setup Samba user allowed to connect on our server via the “smbpasswd” file. See later on this documentation how to setup and use Samba password. The “rm” command would remove the “/usr/share/swat” directory and all the files under it, it will also remove the “swat” binary program under “/usr/sbin/”. The SWAT program is a web-based configuration utility that permits you to configure the “smb.conf” file of Samba via a web browser interface. Of course, in order to use the SWAT utility you will need to have a web server running, such as Apache. The SWAT utility can open a security breach on your server and for this reason I recommend to not use it and remove it. The “mkdir” command would create a “/var/spool/samba/” directory on your system for all printer sharing jobs you may have. Of course this directory is only necessary is you’re intended to use Samba printer sharing over your LAN. Since we are not configured our Samba server to use printer sharing, we do not need to create this directory (“/var/spool/samba/”) on our server and we do not need to use the command “chmod” to change the “sticky” bit in “/var/spool/samba” so only the file's owner can delete a given file in this directory. Cleanup after work [root@deep /]# cd /var/tmp [root@deep tmp]# rm -rf samba-version/ samba.version.tar.gz The “rm” command will remove all the source files we have used to compile and install Samba. It will also remove the Samba compressed archive from the “/var/tmp” directory. Configurations Configuration files for different services are very specific depending of your need and your network architecture. Someone can install Samba Server and have just one client connection and other can install it with 1000 connections. All software we describe in this book has a specific directory and subdirectory in a tar compressed archive named “floppy.tgz” containing file configurations for the specific program. If you get this archive file, you wouldn’t be obliged to reproduce the different configuration files bellow manually or cut and past them to create your configuration files. Whatever your decide to copy manually or get the files made to your convenience from the archive compressed files, it will be to your responsibility to modify, adjust for your needs and place the files related to Samba software to their appropriated places on your server machine, like show bellow. The server configuration files archive to download is located at the following Internet address: http://pages.infinit.net/lotus1/opendocs/floppy.tgz