From: Mauricio Brigato (mauricio@gordon.fmrp.usp.br)
Date: Wed Nov 27 2002 - 11:34:00 EST
This is a NFS question ...
Please help me.
T.I.A.
---------- Forwarded Message -----------
From: Bob Edwards <Robert.Edwards@anu.edu.au>
To: Mauricio Brigato <mauricio@gordon.fmrp.usp.br>
Sent: Wed, 27 Nov 2002 08:11:17 +1100
Subject: Re: Fw: Re: NIS+ linux box root getting root master ???
Mauricio Brigato wrote:
> Please help:
>
> I need urgently a solution for my matter.
> I don't want my linux users make
> a su - <another-user> of a NFS-solaris8-home directory on their linux
> boxes.
> I received some suggestions from Bob Edwards,Darel Hankerson,
> Jesus Garcia and others (thanks a lot to everybody!!!).
>
> I wouldn't like to revoke root access to all my users on the
> Linux machines, as a first solution, cause I've tested
> with a ordinary user and this one can make a su successfully
> even as ordinary user. (Bob idea).
>
This is a problem. No user should ever be able to su to another user without
having to supply a password. If I read this correctly, you are saying that
any
user on your Linux machines can su to any other user without a password - if
so, there is something seriously broken in your setup. Check your PAM
configuration and the credentials on your NIS+ server for your Linux
clients.
> Darrel suggest me separate home directories and only export
> some to the untrusted machines.
> Let me see if I understood. The idea would be:
> - to make a /home/user1 -> share for a IP1
> - to make a /home/user2 -> share for a IP2
> - to make a /home/usern -> share for a IPn ???
>
This will work (if you do it properly), but will become harder to administer
as you add more users, more Linux clients and possibly more servers (ie. it
won't scale very well).
> I've tried various tests:
> - to share solaris /home with DES (AUTH_DES), mount_nfs, share_nfs without
> solution for linux boxes;
> - to change on Solaris the PAM modules in /etc/pamd.conf
> for service name su, modules auth, account, session with the options
> required, requisite and its variations and combinations without success.
>
I don't understand what either of these "tests" are actually trying to solve
in the context of your initial problem with NFS to the Linux machines.
Please be aware that this issue has almost nothing to do with NIS+ (and so,
rightly, shouldn't live on this list). It is a pure NFS permissions problem.
My recommendation, in the first instance, is to revoke root access to your
Linux users (ie. change the root password and don't allow them to log in as
root). There are still many ways for people to thwart the NFS security
issue,
but at least they will then need to be determined and hence possibly draw
attention to themselves.
Cheers,
Bob Edwards.
------- End of Forwarded Message -------
-------------------------------------------------------------
Maurmcio Brigato
System Administrator - BIT - BioInformatic Team
-------------------------------------------------------------
mauricio@bit.fmrp.usp.br
Return-Path: <mauricio@gordon.fmrp.usp.br>
Received: from bit.fmrp.usp.br (localhost [127.0.0.1]) by
gordon.fmrp.usp.br (8.11.6+Sun/8.11.6) with ESMTP id gARGFGJ09861 for
<bit@bit.fmrp.usp.br>; Wed, 27 Nov 2002 14:15:16 -0200 (EDT)
From: "Mauricio Brigato" <mauricio@bit.fmrp.usp.br>
To: "lista do bit" <bit@gordon.fmrp.usp.br>
Subject: Fw: URGENTE! ROUBARAM CRIANÇA
Date: Wed, 27 Nov 2002 13:15:15 -0300
Message-Id: <20021127161515.M63562@bit.fmrp.usp.br>
In-Reply-To: <001d01c29601$fa85c680$e70100c0@ravanelli>
References: <001d01c29601$fa85c680$e70100c0@ravanelli>
X-Mailer: Open WebMail 1.70 20020712
X-OriginatingIP: 143.107.223.187 (mauricio)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-UIDL: 1a%!!>X\"!]Af!!X!)#!
Status: R
X-Converted-To-Plain-Text: from multipart/mixed by demime 0.99c.7
X-Converted-To-Plain-Text: Alternative section used was text/plain
---------- Forwarded Message -----------
From: "Ricardo Jose Ravaneli" <rava@pegasus.fmrp.usp.br>
To: "Ricardo Antonio" <qcpac@ibest.com.br>, "Mauricio Rodrigues" <cerebromau@hotmail.com>, "Mauricio Brigato" <mauricio@gordon.fmrp.usp.br>, "Marit" <madette@pegasus.fmrp.usp.br>, "Marcelo Freitas" <m.ciccaroni@2cartorio.com.br>, "Luiz David Lara Marques" <luizdavidmarques@yahoo.com.br>, "kleber sandro brasil dos santos brasil" <kbrasil69@hotmail.com>, "jeanette zubieta nany" <jeanette_zubieta@hotmail.com>, <edwar@syscom.com.br>, "Eduardo" <cq@ihsl.com.br>, "Edmar Miranda" <edmarmiranda@ermec.com.br>, Depto Ticnico - IS Metrologia Ltda <info@ismetrologia.com.br>, "Dalva Tereza Catto" <dalvinha@pegasus.fmrp.usp.br>, "DANIEL VILELA DE SOUZA" <DANIELVS@vcp.com.br>, "Cizar Josi" <cezar.2001@ig.com.br>, Celso Guimarces Martinez <martinez@unicamp.br>, Cilia Hatsumi Aihara <chaihara@latini.com.br>, Andri Rodrigues de Farias <andre@ismetrologia.com.br>
Sent: Wed, 27 Nov 2002 08:44:35 -0200
Subject: Fw: URGENTE! ROUBARAM CRIANGA
----- Original Message -----
From: Claudia
To: Total Refr. ; Sueli ; Smlvia de Oliveira ; Sheyla ; Rodrigo Dias de Carvalho ; Roberto ; Ricardo Jose Ravaneli ; Patricia Zeotti ; Marcia ; Mara ; Luiz Ribas ; lnmazarini@hotmail.com ; juliana@datajuris.com ; Josimara ; Fernandinho ; Fernanda ; Dalvinha ; Cristiane Ap. Scarpini ; cidinha@pegasus.fmrp.usp.br ; Carla ; Andressa ; aline@pegasus.fmrp.usp.br
Sent: Wednesday, November 27, 2002 8:32 AM
Subject: Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message -----
From: Edgard Josi Alves
To: ugly
Cc: eguilbert ; edson Alves ; ap cont ; altair dos santos lima ; babi ; mc refrigeragco ; vanda esp ; ana maria silva de melo ; aldemar ; Perola ; maria lia ; Claudia ; Carla Leone ; Fernando Volpe
Sent: Wednesday, November 27, 2002 12:07 AM
Subject: Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message -----
From: Paulo Neves
To: ivc Da Matta ; Adilson Garcia - Supermercado Real ; Marcelo Augusto ; Edgard Josi Alves ; Paulo Locce ; Clebergay Mano ; Guilherme Toledo ; walter Espirito Santo ; vandeiraz@ig.com.br ; marcioluis.reis@bol.com.br ; aj.venturelli@bol.com.br ; Mara/Toninho TOGAUCHO ; Lucia Bolfarini ; Valquiria Crepaldi ; Taninha ; Daniel Gls Oliveira ; Jose Antonio Oliveira ; cathiaspolaor@aol.com
Sent: Tuesday, November 26, 2002 7:39 PM
Subject: En: URGENTE!_ROUBARAM _CRIANGA
Por favor repassem ao maior numero de pessoas...........
----- Original Message -----
From: Julio Cesar
To: Paulo GLS ; Marcos Bariano ; Juvenal - Logmstica - Agzcar Guarani S/A. ; Floriano ; FLAVIO NUNES ; Fabiano Fructuoso ; Eduardo Maciel ; Edner Paulo ; Diniz ; Clayton ( MPI ) ; Budinha (Socin) ; Antonio Joco ; jair granero
Sent: Tuesday, November 26, 2002 7:01 AM
Subject: Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message -----
From: Anderson F. Schiavoni
To: Undisclosed-Recipient:;
Sent: Tuesday, November 26, 2002 9:57 AM
Subject: En: URGENTE!_ROUBARAM _CRIANGA
----- Original Message -----
From: Michelle Pessoa Dias
To: Undisclosed-Recipient:;
Sent: Monday, November 25, 2002 1:51 PM
Subject: URGENTE!_ROUBARAM _CRIANGA
> Pessoal, ajudem a divulgar. Os pais sao meus colegas no Banrisul.
> Mari
>
>
> Divulguem , por favor. I a filha de dois colegas nossos (Grupo BCP)
> portanto
> NAO I BRINCADEIRA.
>
> DESAPARECIDA Diana Ventura
> Os pais da menina estao desesperados, a menina desapareceu ontem,
fazendo-se
> acompanhar por uma senhora que se diz ser sua mae, caso tenham
conhecimento
> do seu paradeiro i favor contactar:
>
> Ana Ventura ou Anttnio Ventura
> Tel: 965279224 ou 917597271
>
> Por favor enviem este mail a todas as pessoas que conhecem, obrigado.
> Mtnica Azevedo
>
>
>
>
------- End of Forwarded Message -------
-------------------------------------------------------------
Maurmcio Brigato
System Administrator - BIT - BioInformatic Team
Fundagco Hemocentro de Ribeirco Preto
Phone: +55 16 3963-9300 (9603) Fax: +55 16 3963-9309
E-mail: mauricio@bit.fmrp.usp.br
Homepage: http://bit.fmrp.usp.br/
-------------------------------------------------------------
mauricio@bit.fmrp.usp.br
----- Original Message ----- From: ClaudiaTo: Total Refr. ; Sueli ;
Smlvia de Oliveira ; Sheyla ; Rodrigo Dias de Carvalho ; Roberto ;
Ricardo Jose Ravaneli ; Patricia Zeotti ; Marcia ; Mara ; Luiz Ribas ;
lnmazarini@hotmail.com ; juliana@datajuris.com ; Josimara ; Fernandinho ;
Fernanda ; Dalvinha ; Cristiane Ap. Scarpini ;
cidinha@pegasus.fmrp.usp.br ; Carla ; Andressa ;
aline@pegasus.fmrp.usp.brSent: Wednesday, November 27, 2002 8:32 AMSubject:
Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message ----- From: Edgard Josi AlvesTo: uglyCc:
eguilbert ; edson Alves ; ap cont ; altair dos santos lima ; babi ; mc
refrigeragco ; vanda esp ; ana maria silva de melo ; aldemar ; Perola ;
maria lia ; Claudia ; Carla Leone ; Fernando VolpeSent: Wednesday,
November 27, 2002 12:07 AMSubject: Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message ----- From: Paulo NevesTo: ivc Da Matta ; Adilson
Garcia - Supermercado Real ; Marcelo Augusto ; Edgard Josi Alves ; Paulo
Locce ; Clebergay Mano ; Guilherme Toledo ; walter Espirito Santo ;
vandeiraz@ig.com.br ; marcioluis.reis@bol.com.br ;
aj.venturelli@bol.com.br ; Mara/Toninho TOGAUCHO ; Lucia Bolfarini ;
Valquiria Crepaldi ; Taninha ; Daniel Gls Oliveira ; Jose Antonio
Oliveira ; cathiaspolaor@aol.comSent: Tuesday, November 26, 2002 7:39 PMSubject:
En: URGENTE!_ROUBARAM _CRIANGA
Por favor repassem ao maior numero de pessoas...........----- Original
Message ----- From: Julio CesarTo: Paulo GLS ; Marcos Bariano ; Juvenal -
Logmstica - Agzcar Guarani S/A. ; Floriano ; FLAVIO NUNES ; Fabiano
Fructuoso ; Eduardo Maciel ; Edner Paulo ; Diniz ; Clayton ( MPI ) ;
Budinha (Socin) ; Antonio Joco ; jair graneroSent: Tuesday, November 26,
2002 7:01 AMSubject: Fw: URGENTE!_ROUBARAM _CRIANGA
----- Original Message ----- From: Anderson F. SchiavoniTo:
Undisclosed-Recipient:;Sent: Tuesday, November 26, 2002 9:57 AMSubject:
En: URGENTE!_ROUBARAM _CRIANGA
----- Original Message ----- From: Michelle Pessoa DiasTo:
Undisclosed-Recipient:;Sent: Monday, November 25, 2002 1:51 PMSubject:
URGENTE!_ROUBARAM _CRIANGA
> Pessoal, ajudem a divulgar. Os pais sao meus colegas no Banrisul.
> Mari
>
>
> Divulguem , por favor. I a filha de dois colegas nossos (Grupo BCP)
> portanto
> NAO I BRINCADEIRA.
>
> & nbsp; DESAPARECIDA Diana Ventura
> Os pais da menina estao desesperados, a menina desapareceu ontem,
fazendo-se
> acompanhar por uma senhora que se diz ser sua mae, caso tenham
conhecimento
> do seu paradeiro i favor contactar:
>
> &nb sp; &n bsp; Ana Ventura ou Anttnio Ventura
> &n bsp; & nbsp; Tel: 965279224 ou 917597271
>
> Por favor enviem este mail a todas as pessoas que conhecem, obrigado.
> Mtnica Azevedo
[demime 0.99c.7 removed an attachment of type image/tiff which had a name of IMAGE002.JPG]
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:22 EDT