New Features and New Requirements for SMB scanning

One of the limiting factors of SARA was the ability to access the registry
and other SMB features such as enumerating users.  Starting with sara-4.2.1,
we can do the following:

   1.  Analyze the depth of null session access
   2.  Where enabled (default), get the user list on the target
   3.  Use the user list and an optional password file to brute force passwds
   4.  Where enabled, review registry entries for possibly vulnerable versions.
       the default password file is in rules/smbpasswords.  This feature
       must be enabled by setting the $use_smbpassword in config/sara.cf.

Good things do not come free (figurative sense).  In order to make these 
things happen, you will have to install samba on your SARA machine.  
Specifically, you will have to load samba-tng (www.samba-tng.org).  Be sure
to use version 0.3.2 or higher to avoid the general samba security issues.

If you are already running samba servers, pay close attention to the new
locations required for smb.conf (/usr/local/samba/etc) and smbpasswd (in
/usr/local/samba/private).  Also, locate the samba-init.d file and mv it 
to /etc/init.d/smb.  If you are building under Solaris, apply 
patch.Makefile.in in ...

If you choose to continue to use samba 2.x.x, the features above will not
be enabled as the samba rpcclient does not have sufficient capability. Even 
with Samba 3.x.x, the RPC features are not as robust as Samba-TNG.

** For Irix implementations with a current OS, you may have to remove the line
with irix reference in Makefile.in. (then run make dist, configure).  Newer OS
or compiler is balking on Building smbd (though SARA does not need it).   

** For Solaris users with current Samba and Samba-TNG,, you will have problems
with building smbd.  Specifically, you will probably get a rewinddir error.  
This is a problem with Solaris and recent Samba products.  Soalris has a 
compiler  macro called rewinddir which is not compatible with the libc 
function.  We have not found a fix for this nor have we found a viable patch
from Samba or the TNG folks.  As SARA does not use smbd, we sugges that the
Makefile.in be modified to get rid of the first reference of smbd; then
do a make distclean; then a configure, etc.

FOR OLDER SAMBA DISTS, THIS MAY BE USEFUL:

** For Solaris (up to but not including Soalris 10 and above) users, you will 
need to apply the following patch to Makefile.in in the samba-tng distribution:

1216,1220c1216,1228
<       @for p in $(prefix) $(sbindir) $(bindir) $(LIBDIR) $(localstatedir) \
<               $(tmpdir) $(logdir) $(datadir) $(CODEPAGEDIR) \
<               $(mandir) $(sambaconfdir); do \
<         $(MAKEDIROF) $(DESTDIR)$$p/dummy; \
<       done
---
>       $(SHELL) $(srcdir)/install-sh -d $(prefix)
>       $(SHELL) $(srcdir)/install-sh -d $(sbindir)
>       $(SHELL) $(srcdir)/install-sh -d $(bindir)
>       $(SHELL) $(srcdir)/install-sh -d $(libdir)
>       $(SHELL) $(srcdir)/install-sh -d $(localstatedir)
>       $(SHELL) $(srcdir)/install-sh -d $(sysconfdir)
>       $(SHELL) $(srcdir)/install-sh -d $(datadir)
>       $(SHELL) $(srcdir)/install-sh -d $(mandir)
>       $(SHELL) $(srcdir)/install-sh -d $(sambaconfdir)
>       $(SHELL) $(srcdir)/install-sh -d $(CODEPAGEDIR)
>       $(SHELL) $(srcdir)/install-sh -d $(logdir)
>       $(SHELL) $(srcdir)/install-sh -d $(tmpdir)
>
1270d1277
<         $(MAKEDIROF) $(DESTDIR)$(mandir)/man$$sect/$$basename; \

** For Solaris 10 usrs, you will need to add the line
       #include <stdio.h> 
   after line 36 in samba-tng-0.40/source/lib/snprintf.c

** For IRIX users with older OS or older TNG, delete line 42 in 
   rpclient/display_reg.c
