What about state full inspection of packets by the fire wall?
-----Original Message-----
From: fedora-test-list-admin(a)redhat.com
[mailto:fedora-test-list-admin@redhat.com] On Behalf Of Epps, Aaron M.
Sent: Thursday, January 15, 2004 4:48 PM
To: 'fedora-test-list(a)redhat.com'
Subject: RE: file sharing
In order for you to authenticate to AD you need to have SMB running
since it's the bridge between Windows/Everything Else, that means you need
to have ports 137-139 open, open ports = security risk... Especially common
ones like these.
-----Original Message-----
From: stephan schutter [mailto:rhl@farorbit.com]
Sent: Thursday, January 15, 2004 4:29 PM
To: fedora-test-list(a)redhat.com
Subject: RE: file sharing
Thank you Alan. Me to.
And once again, I am not talking about servers, and I do not see how being
able to authenticate to Active Directory by default is "unsafe".
-----Original Message-----
From: fedora-test-list-admin(a)redhat.com
[mailto:fedora-test-list-admin@redhat.com] On Behalf Of Alan Cox
Sent: Thursday, January 15, 2004 4:17 PM
To: fedora-test-list(a)redhat.com
Subject: Re: file sharing
On Thu, Jan 15, 2004 at 03:47:16PM -0600, Epps, Aaron M. wrote:
I think the Fedora project has chosen to give everyone a secure
installation by default, if you want to open up your system to the world
after the fact that's your choice. Again, there is no "hacking" involved
in
setting this up, unless you consider using a CLI and editing config files
"hacking". Also you must keep in mind that Samba has to reverse engineer
everything to work with AD, which M$ stole from Novell, and that is by no
means a trivial task. I'd say if you really wanted to demo to your company
the power/flexibility/freedom of Linux to setup a Samba server as a domain
controller. Then try using the GUI Samba Authentication tool and see if it
works... I bet it would.
Im not sure the Fedora set up is perfect. I'd still really like to get into
a situation where the first time I go to say cups and add a printer it also
kicks the firewall tools to sort out if you want remote access, and it takes
it away when its no longer relevant
Little project for someone 8)
--
fedora-test-list mailing list
fedora-test-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-test-list
--
fedora-test-list mailing list
fedora-test-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-test-list
--
fedora-test-list mailing list
fedora-test-list(a)redhat.com
http://www.redhat.com/mailman/listinfo/fedora-test-list