[WLUG] Samba security

[Jim Irrer]

I'm looking for advice and opinions.  Our department is migrating our Linux
servers, which are running Samba, to a centranlized server farm.  On a
previous conference call they said that they had security concerns about
running Samba.  The call discussed a lot of topics so we did not go into
detail.

I have another conference scheduled with them and intend to drill into this
deeper.  So my question is, are there legitimate concerns in this regard?
We will only be exposing Samba on UM's hospital network, and it seems like
a lot of the risk could be mitigated by using firewalls to limit access to
a small set of machines.  It would also seem that Samba is just an
implementation of Windows SMB, and if that is already being commonly used,
then why pick on Samba?

Any input would be appreciated!

Thanks - Jim

-- 
Thanks,

- Jim

Jim Irrer     irrer at umich.edu       (734) 647-4409
University of Michigan Hospital Radiation Oncology
519 W. William St.             Ann Arbor, MI 48103-4943
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linux.marcdatabase.com/pipermail/washlug/attachments/20171029/7a4b0d20/attachment.html>