HP3000-L Archives

August 2003, Week 5

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Lars Appel <[log in to unmask]>
Reply To:
Lars Appel <[log in to unmask]>
Date:
Sun, 31 Aug 2003 16:31:54 +0200
Content-Type:
text/plain
Parts/Attachments:
text/plain (29 lines)
Donald wrote...

>Our application provider is telling us that we need SAMBA to serve up .jpg
>files, but that it was ill advised as SAMBA causes performance issues on
>the HP3000 and that it has security issues.  Any insight is appreciated.

Maybe the application provider could provide some details to his advice.

Maybe he is referring to the fact that older Samba/iX versions do not
handle the "encrypt passwords" feature and rely on plain text passwords,
similar to what telnet, NS/VT, or ftp connections do.

Another issue, but not 3000 specific, is whether you configure shares
that allow guest access (no passwords) and are browseable (i.e. can be
seen in network neighborhood or with net view \\hostname) and do allow
write access. Like the [public] example in the sample smb.conf file.

Such shares can be used by the "popular" Windows based worms for their
evil purpose of propagating themselves throughout the network. However,
infected files on a 3000 share don't cause trouble for the 3000 itself;
they only are dangerous for innocent PC users double-clicking them.

So you'd want to avoid shares with "guest ok", "browseable" and "write ok".

Lars.

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2