IPC User Problem (was Situational Deadlock)

Andrew Bartlett abartlet at samba.org
Wed Jan 28 20:40:48 GMT 2004


On Thu, 2004-01-29 at 07:34, Esh, Andrew wrote:
> It should be noted that the problem occurs in Samba 3.0.1 
> (CVS tag release_3_0_1), and  did not occur in Samba 2.2.8a. 
> The code snippet shown below was added to smbd/uid.c:check_user_ok 
> between those two releases.

What is in your smb.conf for 'force user', and 'admin users'?

This code was added to avoid insecurity surrounding 'force user' and
share access by multiple vuids.  You should never set either of these
options globally, or on IPC$ in particular.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040129/35cdbbd7/attachment.bin


More information about the samba-technical mailing list