unpack_nt_owners fails with owner S-1-5-32-544

simo idra at samba.org
Thu Oct 26 01:31:26 GMT 2006


On Thu, 2006-10-26 at 09:49 +1000, tridge at samba.org wrote:
> Where we get into real trouble is if S-ee-ff-gg-hh turns up on the
> wire before we know that it is in fact a migrated version of
> S-aa-bb-cc-dd. In that case we may have created uid2 before we know of
> the sidHistory. Then we are in big trouble :-)

This is exactly the corner case that makes trouble indeed :-)

If you always use a gid in ACLs for every SID, user or group, you
wouldn't have this problem because in that case you could always set the
gid with setgroups() :-)

I know this is not something you'd like to see on any system but it is
nice to see that in theory you could solve the corner cases :)

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org



More information about the samba-technical mailing list