Re: Solaris Beginner

[lukasz () piatek pl]

Hi.

pma111 wrote:
> > Is it possible to access data from a Solaris Server on Windows XP machine? If
> >    
Yes. It is possible. Even default installation of Solaris 10 has Samba 
you have mentioned about.

> > so could you provide tools or strategies to accomplish this. I've heard of
> > SAMBA but would prefer some detail on how this works, i.e a share on the
> > Solaris box would have to be a SAMBA share would it not? Is it possible to
> > access data on a solaris server from a windows machine in the same active
> > directory domain, but without any specialist software?
> >
> >    
You need to implement any universal filesystem strategy. Samba is the 
simplest way to achieve it.
> > I have a copy of the /etc/shadow/ file from the Solaris Server which
> > contains the encrypted passwords but I cannot find any Windows based
> > crackers that will crack these passwords. I also dont know what client
> > software would be required to access data on the Server from a Windows
> > machine even if I do decrypt some weak passwords? Did see some mention of
> > Putty but am unfamiliar with this or SAMBA. I also assume that any "open
> > file shares" on the Solaris box wont be mappable or reachable to a windows
> > machine, as is the case on win2k and windows 2003 servers, when all you need
> > is my network places and hope some of the shares hav been given the deadly
> > "everyone acl" in NTFS? I appreciate Solaris uses a totally different file
> >    
Permissions set on filesystem level determine which in fact level of 
permissions to data is granted. It overrides any network share 
permissions but it is quite obvious, isn't it?
> > system to NTFS but I assume you can share directories with anyone on the
> > network if desired? Any tips on accessing data on this Server from Windows
> > much appreciated.
> >    
There is something like CIFS. It is common ground for such a great deal 
of filesystems around the World.
> > Out of interest, what are the mailing lists views on Security of a Solaris
> > Server if every user on the internal network only have windows machines?
> > Even if there is a weak password or open file share on the Solaris Server,
> > without specialist software is it fair to say the windows users still
> > wouldnt be able to get hold of data on the Server, or is that a very naive
> > view on things?
> >    
Concluding this message it is still uncertain for me whether you want to 
harden your network infrastructure or break someone's network. You would 
better read a little about Samba and hash type used to shadowing Solaris 
passwords. Google will solve such issues instantly.

Regards,
Lukasz Piatek

http://blog.lukaszpiatek.com
http://lukasz.piatek.pl
http://ntsecurity.pl


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------