smb.conf allows Windows clients to access any component folder along the configured share path - samba

Below is the smb.conf used.
Windows clients are given access from “/” instead of this path “/containers/rda-nas/OrbitalBackupRoot/PhantomCores/XXX” as the share’s root directory.
Could anyone point what configuration would disallow access to folders(component path) along the configured share path.
[rda-nas]
path = /containers/rda-nas/OrbitalBackupRoot/PhantomCores/XXX
browseable = no
read only = no
writable = yes
include = /XXX/samba/rda-nas.inc
force unknown acl user = yes
ea support = yes
strict sync = yes
store dos attributes = yes
follow symlinks = no
mangled names = no
nt acl support = yes
smb encrypt = no
oplocks = no
level2 oplocks = no
strict locking = no
vfs object = streams_depot acl_xattr ocafs
acl_xattr:ignore hashes = yes
public = yes
One more question:
In NFS if we export a path, clients will never be known of parent directories along the export path. Why in samba, clients are shown and can traverse directories along the configured share path ?

Related

How to upload a .csv file to GCP storage using Julia

I want to write a .csv file in GCP storage directly from Julia.
GoogleCloud.jl supports this functionality and all steps can be found in it's tutorial
I cite it here but look at the tutorial's version.
using GoogleCloud
creds = JSONCredentials("credentials.json")
session = GoogleSession(creds, ["devstorage.full_control"])
set_session!(storage, session) # storage is the API root, exported from GoogleCloud.jl
file_contents = readstring(open("file.csv", "r"));
storage(:Object, :insert, "a12345foo"; # Returns metadata about the object
name="file.csv",
data=file_contents,
content_type="text/csv"
)

How can we modify the hostingstart.html of kudu in the azure app service?

I'm doing all the work based on the code. I want to work on a simple task of edit and save hostingstart.html in kudu ui, but I don't know how to do it.
Currently, we have checked the connection through Azure app service distribution and dns authentication with terraform, and even checked whether the change is good through hostingstart.html in kuduui.
If possible, I wanted to work with the terraform code, so I wrote it as below and put the html file inside, but it didn't work.
(If it's not terraform, yaml or sh direction is also good.)
resource "azurerm_app_service" "service" {
provider = azurerm.generic
name = "${local.service_name}-service"
app_service_plan_id = azurerm_app_service_plan.service_plan.id
location = azurerm_resource_group.rg.location
resource_group_name = azurerm_resource_group.rg.name
https_only = true
source_control {
repo_url = "https://git.a.git"
branch = "master"
}
}
Or can we specify the default path in the internal folder in this way?
tree : web
+page
- hostingstart.html
+terraform
- main.tf
- app_service.tf
site_config {
always_on = true
default_documents = "../page/hostingstart.html"
}
For the moment. It seems best to deploy and apply through blob storage.
(https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storage_blob)
for Terraform you can’t easily edit that file from management plane APIs, which Terraform would use. Instead, you can deploy a minimal application with whatever you want to show. Here’s an example of deploying code with an ARM template: https://github.com/JasonFreeberg/zip-deploy-arm-template.

Load a Pyramid App with Gunicorn in a different path than /

I have a Pyramid application that I am loading with Gunicorn. My ini file has the following:
[app:main]
use = egg:my_example
...
[server:main]
use = egg:gunicorn
host = localhost
port = 5900
workers = 1
worker_class = gevent
I start Gunicorn witn:
gunicorn --paste ./development.ini
So my application is available at http://127.0.0.1:5900
What do I need to to do so my application is available in other path rather than / ,for example at http://127.0.0.1:5900/my_example
I saw the following posts:
pyramid pserve in different root path than /
and Pyramid: how to set SCRIPT_NAME in request.environ but I'm still not able to do it
Rutter is the right answer if you want all the incoming urls to just remove the prefix from them (for example, http://127.0.0.1:5900/my_example/foo/bar navigates to the /foo/bar route in your app). This seems to be what you're describing and the ini snippet in https://stackoverflow.com/a/43506460/704327 should be sufficient. Rutter will also prepare the environment correctly so that your app will generate the correct urls with the /my_example prefix when using request.route_path and request.route_url.

why do I have to DNS.1 = localhost in my certificate SAN for chrome to accept it

We are creating a CA signed certificate for us to talk to some embedded controller via HTTPS
If we just include a common name, Chrome flags it as insecure, but allows us to click through.
However if we add the following SAN entries in a config file
[alt_names]
IP.1 = 192.168.61.30
IP.2 = 192.168.61.31
IP.3 = 192.168.61.32
Chrome complains that information is not consistent with the server and therefore it is unsafe to access the server page.
We got around it by adding another SAN entry as follows
[alt_names]
DNS.1 = localhost
IP.1 = 192.168.61.30
IP.2 = 192.168.61.31
IP.3 = 192.168.61.32
Then Chrome accepts the certificate and we can access the web page with no errors
What is the DNS.1 entry doing and why is it needed?
There isn't information on how the access is being made to the server.
I'm guessing that you are trying to access it as https://localhost:, right?
Anyway, the Chrome browser will try to match the hostname you are accessing with all SAN attributes and with the CN of the server's certificate.
If it can't match with any of those attributes, then it will trigger an insecurity error, because Chrome can't trust in the server credential provided.

fiware spagobi validation with keyrock instance

i'm using three instances in my account lab. All of them :
1.-web app and a proxy (ubuntu image)
2.-keyrock 5 (keyrock-R5.1.0 image)
3.-spagobi (spagobi image)
i having troubles setting spagobi to validate with keyrock, as in this link: authentication on spagobi using keyrock
"error while trying to get access token from Oauth2 provider"
I followed the guide here:
http://spagobi.readthedocs.org/en/latest/admin/README/index.html
the only difference is REST_BASE_URL, i change port to 5000. (default is 4730)
I think the problem is that spagobi tries to access token without X-Auth-Token value on headers. But i don't know where can i set this on spagobi.
Anyone know this problem and how to solve it? or maybe i'm wrong?
my oauth2.config.properties:
# Informations about OAuth2 application
CLIENT_ID = ea74f4f72ee3438a82f1af785af0ecf1
SECRET = 21cf7df4633d4ff2b92251c266c00d09
APPLICATION_ID = ea74f4f72ee3438a82f1af785af0ecf1
# OAuth2 urls
AUTHORIZE_URL = http://example.es:8000/oauth2/authorize
ACCESS_TOKEN_URL = http://example.es:8000/oauth2/token
USER_INFO_URL = http://example.es:8000/user
REDIRECT_URI = http://example.es:8080/SpagoBI/servlet/AdapterHTTP?PAGE=LoginPage&NEW_SESSION=TRUE
# REST API urls
REST_BASE_URL = http://example.es:5000/v3/
TOKEN_PATH = auth/tokens
ROLES_PATH = OS-ROLES/roles
ORGANIZATIONS_LIST_PATH = OS-ROLES/organizations/role_assignments
ORGANIZATION_INFO_PATH = projects/
# Admin credentials
ADMIN_ID = fiware-example-admin
ADMIN_EMAIL = fiware#example.es
ADMIN_PASSWORD = 01189998819991197253
Sorry. My fault:
because we have not ready the real domain, i add in my /etc/hosts a local resolution. But in spagobi instance i dont do it.
the real problem is in screenshoot:
java.net.UnknownHostException
I solved it adding in /etc/hosts on spagobi instance the same ip.
Sorry for the inconvenience.