[PATCH] Change system handling in smbd

[Andrew Bartlett]

On Mon, 2012-06-11 at 12:13 +0200, Andreas Schneider wrote:
> On Monday 11 June 2012 19:53:18 Andrew Bartlett wrote:
> > Andreas,
> 
> Andrew,
> 
> > I can't find a record of asking you about this patch, but before the
> > beta, I was working on this tree:
> > 
> > https://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/fix
> > -system
> > 
> > In short, it make the system token just that, SID_NT_SYSTEM.  The unix
> > portion remains as is, the sec_initial_uid() and it's primary group.
> > 
> > I wondered if you could confirm that this doesn't break the special case
> > that started you on modifying this area?
> 
> the plan was to completely fake this structure. So don't call and getpw* 
> functions. Only use sec_initial_uid() and sec_initial_gid().
> 
> utok and security_token should be enough.

How about the attached?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-s3-auth-Fix-system-token-as-just-being-SID_NT_SYSTEM.patch
Type: text/x-patch
Size: 2676 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120612/606e31c7/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-auth-Use-only-security_token_is_system-to-determine-.patch
Type: text/x-patch
Size: 3047 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120612/606e31c7/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-s3-auth-inline-make_session_info-functions-into-only.patch
Type: text/x-patch
Size: 5327 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120612/606e31c7/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-s3-auth-make_new_system_info_session-now-does-not-qu.patch
Type: text/x-patch
Size: 4952 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120612/606e31c7/attachment-0003.bin>