IPC User Problem (was Situational Deadlock)

Gerald (Jerry) Carter jerry at samba.org
Mon Feb 2 17:05:16 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Esh, Andrew wrote:

| I have tested the code below (and in the included HEAD
| patch file) and it passes all my regression tests with
| "force group" set in the global area. The patch prevents
| "force user" and "force group" from having any effect on
| the IPC service.
|
| Without this fix, Windows NT can fail to obtain access to
| the IPC service on Samba 3.0 (release-3-0alpha20) and later
| when either "force" tag is in the global configuration section.
| This prevents user access to other shares due to the new
| code "force" tests added in smbd/uid.c:check_user_ok at
| version 1.94.

Does anyone object to this patch ?  It would seem to help
prevent an admin from getting into trouble that is hard to
diagnose on a mailing list.

Just trying to get some resolution here.




cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAHoNMIR7qMdg1EfYRAoW3AJ9Blk7db6Xfcmo241VpvEvJ0xw3mQCeLpIm
4Rd+rmGVHpPBoPV66l9HQSE=
=d8Fh
-----END PGP SIGNATURE-----



More information about the samba-technical mailing list