See Windows permissions on a folder via Linux.

hack3rcon · 11-23-2016, 09:57 AM

Hello.
Can I see the users and groups permissions that set by Windows Server on a folder? I mean is something like "https://i-technet.sec.s-msft.com/dynimg/IC46402.gif"

Thank you.

szboardstretcher · 11-23-2016, 10:01 AM

That isn't a folder. That is a URL to a GIF file.

hack3rcon · 11-23-2016, 10:02 AM

Quote:

Originally Posted by szboardstretcher

That isn't a folder. That is a URL to a GIF file.

Open the file and you can see "Security" tab under Windows OS.

af7567 · 11-23-2016, 11:26 AM

Quote:

Originally Posted by hack3rcon

Hello.
Can I see the users and groups permissions that set by Windows Server on a folder? I mean is something like "https://i-technet.sec.s-msft.com/dynimg/IC46402.gif"

You could try the showacls option of smbclient. First use smbclient to connect to the share, then turn on showacls by running that command, then ls "Folder name" to see the ACL.

Code:

$ smbclient //server/share
Anonymous login successful
Domain=[WORKGROUP] OS=[Windows 6.1] Server=[Samba 4.4.5]
smb: \> showacls
smb: \> ls 2016
FILENAME:2016
MODE:D
SIZE:0
MTIME:Sat Nov  5 14:43:01 2016
revision: 1
type: 0x9004: SEC_DESC_DACL_PRESENT SEC_DESC_DACL_PROTECTED SEC_DESC_SELF_RELATIVE 
DACL
	ACL	Num ACEs:	3	revision:	2
	---
	ACE
		type: ACCESS ALLOWED (0) flags: 0x00 
		Specific bits: 0x1ff
		Permissions: 0x1f01ff: SYNCHRONIZE_ACCESS WRITE_OWNER_ACCESS WRITE_DAC_ACCESS READ_CONTROL_ACCESS DELETE_ACCESS 
		SID: S-1-22-1-0

	ACE
		type: ACCESS ALLOWED (0) flags: 0x00 
		Specific bits: 0xa9
		Permissions: 0x1200a9: SYNCHRONIZE_ACCESS READ_CONTROL_ACCESS 
		SID: S-1-22-2-0

	ACE
		type: ACCESS ALLOWED (0) flags: 0x00 
		Specific bits: 0xa9
		Permissions: 0x1200a9: SYNCHRONIZE_ACCESS READ_CONTROL_ACCESS 
		SID: S-1-1-0

	Owner SID:	S-1-22-1-0
	Group SID:	S-1-22-2-0

		234460408 blocks of size 1024. 154326896 blocks available

sundialsvcs · 11-23-2016, 12:42 PM

To clarify:

In the original post, we're presented with a URL that references a file somewhere. This would be handled by a web server, which would use this URL to locate some file-resource and serve its contents to you. The web server probably will not tell you anything about that file.

On the other hand, "Samba" is a Linux file-sharing client that is largely compatible with Microsoft's standard "SMB" sharing protocol. As such, it is able to tell you the same things about the file that a similarly-authorized Windows user would be able to learn about a shared file on some remote server.

And, yes, the Samba suite can also participate on a Windows network as a server. Like all such servers, it will attempt to map "its filesystem world" to "a Windows equivalent view," with more, or less, thoroughness.

dave@burn-it.co.uk · 12-02-2016, 08:18 AM

Are you asking us to tell you how to access files that you shouldn't have access to??

hack3rcon · 12-03-2016, 12:59 PM

I like to see that which users have which permission on a folder in windows share, but via linux.

273 · 12-03-2016, 01:22 PM

Reading this because I'm intrigued.
If you open the picture linked to in the original post then it's a Windows permissions dialogue box -- not the file which the OP wishes to access but a representation if what hack3rcon would like to see under Linux...