LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 03-07-2012, 02:16 AM   #1
bobbera
Member
 
Registered: Jun 2007
Posts: 39

Rep: Reputation: 0
Mounting to Windows share with domain user w/o password !?


Hi ,


I found weird mount.cifs behavior .

Having RHEL 5.6 . One Linix user successfully mount his Windows host share locally with the following command :


#sudo /bin/mount -t cifs //windows-host-name/share-name mount_point -o username=domain-name/user1

Since in our LAN Windows hostname reminds Windows account ( 8 characters) another user say user2 after listing existing mounts may easily guess Windows account and as a result successfully mount user1s Windows share without password !

As user2 :
##sudo /bin/mount -t cifs //windows-host-name/share-name mount_point -o username=domain-name/user1
#Password:

In both commands windows-host-name and share-name are the same

Any ideas ?
 
Old 03-07-2012, 10:10 PM   #2
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,153

Rep: Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436Reputation: 3436
I'd need to know more about the authentication on the windows system. Generally one opens shares read write but protects them by ntfs permissions.
 
Old 03-08-2012, 07:04 AM   #3
bobbera
Member
 
Registered: Jun 2007
Posts: 39

Original Poster
Rep: Reputation: 0
The problem is not on Windows side - I may confirm that the same problem exists when I repeat this trick while mounting to Linux server when the last one is a Windows domain member .

Again , once some user mounted his Windows share anothe user may mount the same share w/o password : he knows windows host,share name and username already used since hostname more or less the same as user account in Windows .
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Mounting Windows share w/o password bobbera Linux - General 4 03-08-2012 05:01 PM
Mounting a standard user, windows share at login metallica1973 Linux - General 3 12-01-2011 05:08 PM
Allow domain user access to share MeeLee Linux - Newbie 4 10-19-2010 02:47 AM
Mounting Windows share with a space in the share name Suncoast Linux - Networking 1 06-19-2009 10:15 AM
Mounting A Smb Share At Login - For Domain Users nm2588 Linux - Networking 3 12-07-2006 10:05 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 06:52 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration