DCERPC Security Context Multiplexing (ready for review)

Stefan Metzmacher metze at samba.org
Tue Dec 18 13:31:32 UTC 2018


Hi,

I'm currently working on an implementation of the
SecurityContextMultiplexingSupported feature from [MS-RPCE] 3.3.1.5.4
Security Context Multiplexing in the source4/rpc_server code.

Basically the concept is similar to having multiple session setups
on a single SMB connection, just for DCERPC.

This is important in order to fix or avoid the following bugs:
https://bugzilla.samba.org/show_bug.cgi?id=7113
https://bugzilla.samba.org/show_bug.cgi?id=11892
https://bugzilla.samba.org/show_bug.cgi?id=13464

The patches are in the following branch:
https://git.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master4-dcerpc-ok

The following pidl change to the python bindings:
https://git.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=052016f3415a
results in the following diff of the generated code:
https://git.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=44d05e1b35a8
Before we had broken code like this:

  r->in.unknown = NULL;
  *r->in.unknown = NULL;

I opened the following merge request for the almost finished patches:
https://gitlab.com/samba-team/samba/merge_requests/173

I still need to check some details and improve some commit messages, but
the review and already start...

Please review and comment:-)

Thanks!
metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20181218/0872aba1/signature.sig>


More information about the samba-technical mailing list