Patch: Allow unprivileged processes to read registry

Stef Walter stefw at gnome.org
Thu Apr 5 10:58:27 MDT 2012


The samba configuration is shared between daemons and clients. If
'config backend = registry' is configured, then currently clients
running without root privileges (like smbclient) fail with:

Failed to initialize the registry: WERR_ACCESS_DENIED

The attached patch fixes this issue. The database is created with 0644
permissions. If write access to the database fails, then the database is
opened in read-only mode.

I've tested this with various commands and it seems to do the trick.

Does this look like a good approach? If so, I'll file a bug for the patch.

Cheers,

Stef
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-s3-Allow-unprivileged-processes-to-read-registry.tdb.patch
Type: text/x-patch
Size: 4774 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120405/02f08358/attachment.bin>


More information about the samba-technical mailing list