[PATCH] Fix idmap cache pollution with S-1-22-

Ralph Böhme slow at samba.org
Wed Feb 27 18:27:21 UTC 2019


On Wed, Feb 27, 2019 at 07:04:46PM +0100, Volker Lendecke via samba-technical wrote:
>Attached find a patchset that fixes a problem in a customer
>environment: A short-term hickup in winbind communication for a
>uid2sid call made smbd fall back to legacy_uid_to_sid, filling the
>idmap cache with S-1-22-1-uid for a week. The main point is that
>conversion to S-1-22-x should not be cached, as this is a fallback of
>last resort. On that way, this cleans up that code path a bit.

I guess I'd love to see this being assigned a bug and backports to the stable 
branches. What do you thing? From your description it seems to be a real bug 
anyway.

-slow

-- 
Ralph Boehme, Samba Team                https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
GPG-Fingerprint   FAE2C6088A24252051C559E4AA1E9B7126399E46



More information about the samba-technical mailing list