Archive for March, 2008

Ubuntu Survives PWN to OWN Hackfest Unscathed

Saturday, March 29th, 2008

A laptop running Ubuntu Gutsy (7.10) remained the only uncompromised system at the CanSecWest conference PWN to OWN competition.

The competition sees hackers compete to discover a 0 day code execution vulnerability, on one of three laptops running Mac OSX, Windows Vista or Ubuntu. The winners take the pwned laptop plus a generous cash award.

Mac OSX (10.5.2) fell on day two, after the discovery of a vulnerability in the Safari web browser allowed a team from Independent Security Evaluators to remotely exploit an Apple MacBook Air. Day three saw Shane Macauly of Security Objectives defeat the Windows Vista (SP1) laptop using an exploit against the latest version of Adobe Flash.

Well done Ubuntu.

Authenticating an Ubuntu PC to Active Directory

Saturday, March 22nd, 2008

Likewise Open is a piece of software designed to make it easier to integrate Linux PC’s into an Microsoft Windows Active Directory (AD) domain. Now you can log onto your Ubuntu PC using your Windows network username and password, and access your shared files and resources whilst logging on only once.

You can find the ‘likewise-open’ and ‘likewise-open-gui’ packages in the Ubuntu Hardy universe repository. Go to System > Administration > Synaptic Package Manager, ensure the universe repository is enabled, and search for ‘likewise’.

After installation, you can find the Likewise Open GUI in Applications > Internet > Likewise. Joining the domain is simple enough. Specify the FQDN of your domain and click on ‘join domain’. After giving details of an account with permission to add computers to the domain, you should be connected.

Restart the PC, and at the GDM login screen try an Active Directory login. For instance:

DOMAIN\username

Hopefully all should be well, if not try the following.

—-

Login as a normal (non-AD) user and run the following command.

lwiinfo -n “DOMAIN\username”

You might get an error complaining ‘could not obtain winbind separator!’

It looks like the likewise-open script is not set to start with the system. To see if this is the case, try running ‘sudo likewise-winbindd -start‘ and try the command again. If it works this time (you should see a string of numbers and letters) you need to set likewise-open to start with the system.

To do this run ‘sudo sysv-rc-conf‘ from the command line, and turn the likewise-open service on for runlevels 2,3,4,5. Hopefully this should be sorted soon, I’ve filed a bug report.’

—-

At this moment in time you are likely to come across other issues. Sound, USB, sudoers etc will not work under the AD user. I’m sure that there are workarounds for this which involve mapping AD user groups to local groups. Hopefully in time for release we’ll see some firm instructions for this appear.

If you’re interested, watch this space.