Debian Tutorials » samba http://www.debiantutorials.com Copy/Paste tutorials for Debian based Linux distros Tue, 27 Dec 2011 01:15:56 +0000 en hourly 1 http://wordpress.org/?v= Securing unencrypted traffic with stunnel http://www.debiantutorials.com/securing-unencrypted-traffic-with-stunnel/ http://www.debiantutorials.com/securing-unencrypted-traffic-with-stunnel/#comments Wed, 14 Oct 2009 20:54:44 +0000 aip http://www.debiantutorials.net/?p=130 Stunnel can be used to provide secure encrypted connections for clients or servers that do not speak TLS or SSL natively. In this tutorial we'll secure Samba connection but you could use this for other services like SMTP, IMAP, POP3 etc.

If you are securing a service where the client supports encrypting like SMTP, IMAP and POP3 you can skip the client step.

Server

1. Install stunnel

apt-get install stunnel

2. Configure Samba to only listen on localhost only (pico /etc/samba/smb.conf)

interfaces = 127.0.0.0/8
bind interfaces only = yes

3. Restart Samba

/etc/init.d/samba restart

4. Create SSL certificate and a key

openssl req -new -nodes -x509 -out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem

5. Configure stunnel to listen for secure connections on port 8139 and forward to port 139 on localhost (pico /etc/stunnel/stunnel.conf)

cert = /etc/stunnel/stunnel.pem
 
[smb]
accept = 8139
connect = 139

6. Enable stunnel (pico /etc/default/stunnel4)

ENABLED=1

7. Start stunnel

/etc/init.d/stunnel4 restart

Client

1. Install stunnel and smbclient

apt-get install smbclient stunnel

2. Configure stunnel to listen for connections on localhost:139 and forward to the server on port 8139 using a secure connection (pico /etc/stunnel/stunnel.conf)

client = yes
 
[smb]
accept = localhost:139
connect = {ip}:8139

Replace {ip} with the IP address of your server previously configured

3. Enable stunnel (pico /etc/default/stunnel4)

ENABLED=1

4. Start stunnel

/etc/init.d/stunnel4 restart

5. Test the connection using smbclient

smbclient -U user1 //localhost/sambashare

]]> http://www.debiantutorials.com/securing-unencrypted-traffic-with-stunnel/feed/ 0 Installing and configuring Samba http://www.debiantutorials.com/installing-and-configuring-samba/ http://www.debiantutorials.com/installing-and-configuring-samba/#comments Tue, 13 Oct 2009 22:43:07 +0000 aip http://www.debiantutorials.net/?p=127 Samba is a free software re-implementation of SMB/CIFS networking protocol providing file and print services for various Microsoft Windows clients and can integrate with a Windows Server domain, either as a Primary Domain Controller (PDC) or as a domain member. It can also be part of an Active Directory domain.

1. Install the base packages

apt-get install samba
> WORKGROUP (Type the workgroup you would like to use here)
> No

2. Create a directory to share (optional)

mkdir /var/sambashare

Replace the directory with the actual one you would like to share or skip this step if it's already available

3. Create a user, map the new user in the samba password database and grant access to the directory

useradd user1
smbpasswd -a user1
chown user1 /var/sambashare

4. Configure samba (pico /etc/samba/smb.conf)

[sambashare]
path = /var/sambashare
browseable = yes
writeable = yes
valid users = user1

Add these lines to the end of your Samba configuration file

5. Restart the samba daemon

/etc/init.d/samba restart

6. Now you can access your share from Windows by typing: \\ipaddress\sambashare. Use the username and password defined in step 3 when prompted.

]]> http://www.debiantutorials.com/installing-and-configuring-samba/feed/ 0