View Single Post

   
  #5 (permalink)  
Old 02-16-2008, 06:22 AM
John Doe
 
Posts: n/a
Default Re: Shlight considerations ...


<meonnewsgroup@poinkom.com> wrote in message
news:227295ed.0402270145.31292a19@posting.google.c om...
> "John Doe" <JohnDoe@here.somewhere.com> wrote in message

news:<x7s%b.19379$253.1107986@news20.bellglobal.co m>...
> > <meonnewsgroup@poinkom.com> wrote in message
> > news:227295ed.0402260319.d865a14@posting.google.co m...
> > > I'm setting up a ftp server that permits to access a windows share ...
> > > I'm looking for documentation about shlight on OpenBSD.
> > > Could someone post an url to a longer documentation than the

"shlight -h"
> > ?
> > >
> > > Thanx ...
> > >
> > > A. E.

> >
> > I haven't personally used it in ages but I think it uses smbmount.c from
> > smbfs so perhaps smbmount(8) man page?
> >
> > I know of someone who does exactly what you're looking to do, without

any
> > problems.
> >
> > hope that helps some.

>
> I've already tested SHLIGHT+FTPD ... It works fine. I have no problem
> with that. The ftp server is ok. Every user is chrooted to its home
> directory and everythig is just fine. Then I installed sharity-light
> from the OpenBSD ports that also worked fine.
> My problem is that there's no advanced documentation for the shlight
> command. So I can't set up a solution where everything is filtered by
> PF if i can't decide wich port will be used ...
> I'll give you an example :
> When you mount a windows share using shlight :
> #shlight //x.x.x.x/share /home/me/w2k -U user -P pwd
> Everything is ok and shlight after mounting tha share comes up with :
> "Using port 10392 for NFS."
> Ok fine. But when I try to determine the used nfs port usind the
> switch "-p" as mentionned in the help "shlight -h", something goes
> wrong ...
> #shlight //x.x.x.x/share /home/me/w2k -U user -P pwd -p 12345
> shlight answers :
> "error connecting to server: [1] Operation not permitted"
> But i need to detrmine a pool of ports that I can trust throught PF !
> This is only an example. I mean If I want to set up a soft solution, I
> need a real documentation of shlight. smbfs documentation won't help I
> think ...
>
> Thanx ...
>
> A. E.


Oh I see what you're getting at now. Sorry I can't help much there other
than what Oliver Cherrier said or man sh-smbmount.

I believe the -p is used for the netbios-ssn port (ie, 139 by default) so -p
would be used in instances where you want to bind a socket connection to say
a samba server listening on a non-privledged port such as 12345 rather than
default of 139. So the reason you get that error is cause your Win2k box
isn't listening on -p 12345 - as a way to test, try -p 139 to see.

One way I can think of would be with sysctl's but that might not be suitable
for you or the best method. In other words, if you wanted the NFS ports to
be within a certain range - but this is just a thought...

net.inet.ip.portfirst =
net.inet.ip.portlast =
net.inet.ip.porthifirst =
net.inet.ip.porthilast =
--
net.inet.tcp.baddynamic =
net.inet.udp.baddynamic =

Hope this helps somewhat.

Regards.


Reply With Quote