Advertise on MozillaQuest Magazine Getting Started with Wireless Network Technology MozillaQuest MQ Logo
MozillaQuest the on-line computer magazine
May 1, 2003

TotalShells.com

EPIX Internet Services
MozillaQuest Magazine Front Page button

Internet & Web browsers button

custom Netscape & Mozilla themes & skins button

Digital Photography

Graphics

IRC - Internet Relay Chat - Chat button

Linux buttonLinux for Windows Users

Mozilla button

Multimedia

Netscape button
network articles

tutorial - help - how to button

Web Page Design

Web Tools

Windows button
..
..

Linux for Windows Users:

Linux Networking for Windows and Desktop People -- Mandrake 9.1 and LinNeighborhood

Mike Angelo -- 1 May 2003 (C) -- Page 2

I would myself never use samba to mount remote Linux shares. I would export the file system with NFS and then mount it with NFS on my client. I find SAMBA a bit tricky sometimes, and NFS more straightforward. SAMBA is good when you _must_ interact with Windows. And samba supports printer sharing as well. Richard Torkar, Open Source developer and Ph.D. student.

Reverse Access

The next tweak is needed to let the other computers on your LAN see the shares on your new Mandrake 9.1 installation computer. Just what you need to do here depends on (a) what operating systems are running on the other computers on your LAN, and (b) how the user-accounts on those machines are configured.

  • Security Issues

An important underlying principle here is that you want to maintain system security. If you are not careful, and you have an open connection to the Internet, you could wind up giving the entire Internet-world access to your computer. Restricting access to shares on your Mandrake Linux 9.1 box can help maintain system security.

One way to do this is to allow only people with user and Samba accounts on your Mandrake 9.1 computer to access shares on that computer. Thus, setting up user and Samba accounts for specific people on other machines to gain access to shares on your Mandrake Linux 9.1 box can help maintain system security.

You also can restrict the hosts (remote computers) that are allowed to gain access to your computer. Additionally, Mandrake 9.1 includes software firewall protections that you can enable if you wish. However, these topics are beyond the scope of today's article so they will not be discussed here.

Another important weapon in your system-security arsenal can be a hardware firewall/router. A hardware firewall/router is especially important if you are connected to the Internet via a broadband connection such as cable, DSL, ISDN, and so forth.

An example of a hardware firewall/router is the D-Link, DI-604, 4-Port, Ethernet Broadband Router It can be used with Linux-based, Mac-based, and MS Windows-based computers. Simply put, such a firewalled-router stops most types of attempts to crack or hack your networked computers that come from the Internet -- before those attempts ever get to the computers on your LAN. The MSRP is $50. (Link in the Resources section at the end of this article.)

  • Adding user and Samba accounts for file sharing

It's likely there are users that you will want to let have access to shares on the Mandrake 9.1 machine from other (remote) computers on your LAN. These users on other machines need to have user and Samba accounts on your Mandrake 9.1 machine in order to access shares on the Mandrake 9.1 machine -- even though they might never directly log-on to your Mandrake 9.1 box.

Tricks to restrict remote log-on access

There are tricks that you can implement to restrict remote log-on access to your Linux-based computer. That's beyond the scope of this article. So in the meantime, only give user/Samba accounts to people you trust -- unless you know the tricks. In other words if you do not trust a person enough to give them an account on your Mandrake 9.1 box, do not give them Samba access to it -- for now.

However, one quick trick is to use a different password for the user account and the Samba account. Then give the samba user only the Samba password. That way the user can gain share access via Samba, but cannot log-on to your computer as a user -- at least without cracking the user password.

Never log-in as root

You do not need to log-on as root to do root things. Matter of fact, you never should log in as root unless you absolutely have to do so. Rather, you should log-on as a regular user. Then go to a terminal and at the command prompt type su - . Mandrake then will ask you for the root password. If you enter the correct password, Mandrake will put that terminal window in root mode and present you with a root prompt. su stands for super-user. The system administrator or root is considered the super-user on a computer. So the su command puts you in super-user or root mode. The - is an important part/parameter of the su command. It puts you in a root login shell.

However, once you give these users accounts on your Mandrake 9.1 box, they could log-on to your Mandrake 9.1 computer as a user -- either directly or via a remote login service such as Telnet. So, only give user/Samba accounts to people you trust.

Of course, we are taking a more conservative approach to security here. You could take a more liberal approach to security if you like. Your choice.

To add a user to the Mandrake 9.1 box, open the Mandrake Control Center (MCC) on the Mandrake 9.1 computer. Then click on System > Users. That opens the Users and Groups window. Drop the Settings menu to toggle between the users and groups screens. Toggle to the View users screen and add the users.

Next toggle to the View groups screen. Then add each user on the Mandrake 9.1 box that you wish to be able to participate in file-sharing to the fileshares group on your Mandrake 9.1 box. Next add the users that will access your Mandrake Linux 9.1 shares from remote MS Windows boxes and other remote Linux boxes to the fileshares group too. After that, configure file-sharing on the Mandrake 9.1 box.

You also must add all the users that will have remote access to shared files on your Mandrake 9.1 box to the Samba users list. It's simple.

All the root user needs to do is to type smbpasswd -a user-name at a root prompt on your Mandrake 9.1 box. Do this for each remote user that will have access to shared files on your Mandrake 9.1 box.

  • Configuring and permitting file sharing

You must enable sharing for any folders on your Mandrake 9.1 box for which you want to open access from other computers on your LAN to allow sharing. To do this, right-click on a folder or shareable device in the Konqueror file manager. Then click on the Share tab. Then tick Shared.

The first time you try to set a directory for sharing, you will have to configure file-sharing. To do that, after you click on the Share tab in the properties pop-up box, click the Configure File Sharing button. You will need to have the root (system administrator) password in order to configure file sharing.

After you enter the root password, the fileshare box pops-up. Do NOT select Allow all users! Select only Custom. This is a security issue. Then click OK.

Next the diskdrake box will pop up asking if you want to Launch userdrake. Go ahead and click the Launch userdrake button.

However, you already have added the users to the users list and to the fileshares group. So, if userdrake does pop up, just exit it. For us, userdrake never pops up here. Since we already have added the users to the users list and to the fileshares group that is not a problem.

  • Access From a MS Windows box

Just how tricky it gets with MS Windows boxes depends on what Windows versions are involved. To keep things simple here is an easy way to handle things.

Figure 3. Windows Network Neighborhood. Here the Enitre Network folder is expanded showing a Linux computers workgroup (Md) and a Windows computers workgroup (Wo).
Simply add each Windows user that you wish to have share-access to the Mandrake 9.1 box to the user list and samba-user list for the Mandrake 9.1 box as discussed above.

Use the exact same user name (profile name) that is used to log onto MS Windows for the Mandrake 9.1 user name and Samba-name entries for each Windows user. Use the same password too.

If things work right, the Windows-box Network Neighborhood should be able to find the Mandrake 9.1 box and give you access to the shares on the Mandrake 9.1 box from the Windows box. You might have to provide a password if prompted to do so. Please see Figure 3.


  • See Viewing Remote Shares with LinNeighborhood on Page 3 ----->


  • Copyright 2000 - 2003 -- MozillaQuest -- Brodheadsville, Pa..USA -- All Rights Reserved
    Recent Articles

    Gaël Duval and Mike Angelo Discuss the New AMD64 OS --

    Mandrake Linux Corporate Server 2.1 for AMD Opteron

    SuSE Linux Enterprise Server 8 for AMD64 Released

    Major Morphing in Mozilla Project Organization and Objectives Proposed

    Red Hat Linux 9 Distribution Released -- To Paying Customers

    Mandrake Linux 9.1 Released for Downloading

    SCO-Caldera v IBM:

    Mandrake 9.1-RC1 Available for Downloading Now

    Netscape 7.02 Browser-Suite Released

    SCO-Caldera & the GNU/Linux Community: The SCOsource IP Matter

    LinuxWorld in New York City -- 21-24 January 2003

    Don't Forget the Books

    Linux Makes a Great Gift

    Christmas Season Holidays & Computer Suggestions 2002: Overview

    Netscape 7.01 Browser-Suite Released

    Mozilla 1.2.1 Browser-Suite Released

    Buggy Mozilla 1.2 Recalled

    Mozilla 1.2 Browser-Suite Released

    Mandrake Linux 9.0, Desktop Magic You Can Use: A First Look

    Mandrake Linux 9.0 Retail Boxes Ship

    Linux for Windows Users:

    Using LinNeighborhood to Create a Network Neighborhood for Linux

    SuSE 8.1 LSB Certified

    SuSE Linux 8.1 Release Today

    Zero Tolerance for Privacy and Security Bugs

    Mozilla and Netscape JavaScript Bugs Compromise Privacy and Security

    Red Hat Linux 8.0 Is LSB Certified

    Red Hat Linux 8.0 Distribution Released

    Mandrake 9.0 is LSB Certified

    Mandrake Linux 9.0 Released for Downloading

    SCO's Darl McBride and MozillaQuest Magazine's Mike Angelo Discuss Caldera Linux and LSB

    Caldera/SCO 3.1.1 OpenLinux Distribution Gains LSB Certification

    Mozilla 1.2-alpha Browser-Suite Released

    Mozilla 1.0.1 Browser-Suite Released

    UnitedLinux: A Standard or a Distribution?

    UnitedLinux, a Divisive Weapon for Caldera's Darl McBride -- Part II

    Holger Dyroff, Gaël Duval, Mark de Visser and Mike Angelo Discuss LSB, UnitedLinux, and the Linux Market

    UnitedLinux, a Divisive Weapon for Caldera's Darl McBride -- Part I

    Netscape 7.0 Browser-Suite Released

    Netscape 7.0 Browser-Suite Coming, But Not Here Yet

    Mozilla 1.1 Browser-Suite Released

    Mozilla 1.0.1-RC2 aka Netscape 7.0-beta Browser-Suite Released

    Netscape Communicator 4.8 Browser-Suite Released

    Red Hat Calls on Linux Comunity for Beta Feedback

    Red Hat Linux 7.4/8.0 Moves Closer -- Beta 3 (Null Nee Limbo) Released

    MandrakeSoft Calls on Linux Community for Beta Testers

    Mandrake Linux 9.0 Beta 3 Available Now -- 9.0 in September

    Mozilla 1.0.1-RC1 Browser-Suite Released

    Mandrake 8.2, Red Hat 7.3, & SuSE 8.0 Linuxes now LSB Certified

    Scott McNeil and MozillaQuest Magazine Discuss LSB

    Are You Ready For the Linux Standard Base? LSB is Ready for You!

    SuSE Linux 8.1 in October -- UnitedLinux Server in November

    SuSE Says Yes to LSB and UnitedLinux

    New Mozilla Roadmap Sets 1.1 for 9 August 2002 and Effectively Kills Mozilla 1.0.x

    Mandrake Linux 9.0 Beta 1 Available Now -- 9.0 in September

    MandrakeSoft Says Yes to LSB but No to Netscape and UnitedLinux

    Red Hat Linux 7.4/8.0 in the Works -- Beta 2 (Limbo) Released

    Red Hat Drops Netscape

    Mozilla 1.0 Browser-Suite's E-Mail & News Quick Look

    Mozilla 1.1 Beta Browser-Suite Milestone Released

    Mozilla 1.0 Browser Quick Look

    Tabbed-Browsing Coming to KDE's Konqueror Browser

    A Quick Look at Mozilla 1.0 Browser-Suite Performance -- Speed, Stability, and Memory Hogging

    Mozilla 1.1 Alpha Browser-Suite Milestone Released

    Mozilla 1.0 is Officially Out!

    A Quick Look at Some Mozilla 1.0 Browser-Suite Annoyances, Bugs, And Issues

    Mozilla 1.0 Not Ready for Prime Time -- Close but No Cigar and No Brass Ring!

    Turmoil in MozillaLand:

    Current Status of Mozilla 1.0, 1.0.1, and 1.1-Alpha

    Mozilla 1.0 Browser Unofficial Sneak Release

    Mozilla 1.0 is unofficially out!

    Mozilla 1.0 Browser-Suite Coming Soon

    Mozilla 1.0-RC3 Browser-Suite Milestone Released

    Netscape 7.0-PR1 Browser-Suite Released

    Netscape 6.2.3 Browser-Suite Released

    Mozilla 1.0-RC2 Browser-Suite Milestone Released

    AbiWord 1.0.1 Quick Look

    MS Word Clone for Linux, MS Windows, & Other Platforms

    Mozilla Roadmap:

    Mozilla 1.0-RC2 Set for 10 May Release

    Mozilla 1.1a for 22 May 02

    Red Hat Linux 7.3 Distribution Released

    Red Hat Linux 7.3 Coming Soon?

    Mandrake Linux 8.2 Boxed-Sets Available -- Update -- KDE 3.0 Upgrade & StarOffice 6.0

    Mandrake Linux 8.2 Boxed-Sets Now Available

    Mozilla 1.0-RC1 Browser-Suite Milestone Released Behind Schedule

    Mozilla 1.0-RC1 Browser-Suite Sneak Preview

    Mozilla 1.0 on the Way -- Milestone 1.0-RC1 Branched

    Red Hat Linux 7.3/8.0 Coming Soon -- Beta 2 (SkipJack) Released

    SuSE Linux 8.0 Set for April 22 Release

    KDE 3.0 Released -- Binaries and Source Code Available for Downloading

    Mandrake Linux 8.2 Released for Downloading

    Netscape 6.2.2 Browser-Suite Released

    Mozilla Milestone 0.9.9 Browser-Suite Released Behind Schedule

    Mozilla 0.9.9 Browser-Suite Sneak Preview

    Mozilla Milestone 0.9.9 Branched Behind Schedule

    MozillaQuest Magazine 2001 Editor's Choice Hardware Picks

    Mozilla Roadmap Update:

    Moz 1.0 April Release Confirmed & Post-1.0 Development Plan Announced

    The PowerLeap Renaissance -- A Handy PC Upgrade or Repair on a Card

    Mozilla Milestone 0.9.8 Browser-Suite Released Behind Schedule

    Mozilla Milestone 0.9.8 Browser-Suite Sneak Preview

    Caldera OpenLinux 3.1.1 Available

    Getting Started with Wireless Network Technology

    Part III: Adding Wireless to a Linux-Based Laptop or Notebook

    AOL-TW Purchase of Red Hat Linux Update:

    AOL Denies It! Alan Cox Tells AOL to Shove It!

    Overview of an AOL-TW Purchase of Red Hat Linux

    Part I: What AOL-TW Gets and Does Not Get in a Red Hat Acquisition

    Is Mozilla Actually AOL-Netscape's Mozilla?

    Bugzilla 2.16 Release Reset & Bugzilla 2.14.1 Security Update Released

    Year 2001 in Review -- Mozilla and Netscape Browsers

    Free Software for Your New Christmas Computer -- Or Any Computer for That Matter

    Linux Gifts for Christmas, Holiday, and All Occasions