]> git.ipfire.org Git - thirdparty/samba.git/commit
dcesrv_core: wrap gensec_*() calls in [un]become_root() calls
authorStefan Metzmacher <metze@samba.org>
Sat, 22 Jan 2022 00:08:26 +0000 (01:08 +0100)
committerStefan Metzmacher <metze@samba.org>
Mon, 24 Jan 2022 15:25:36 +0000 (15:25 +0000)
commit0651fa474cd68b18d8eb9bdc7c4ba5b847ba9ad9
tree8a850c300df26c84a5e58c58704b6672268d4ea6
parentbe1935dac8a188901ae0f13181b356b508c5be4f
dcesrv_core: wrap gensec_*() calls in [un]become_root() calls

This is important for the source3/rpc_server code as it might
be called embedded in smbd and may not run as root with access
to our private tdb/ldb files.

Note this is only really needed for 4.15 and older, as
we no longer run the rpc_server embedded in smbd,
but we better be consistent for now.

This should be able to fix the problem the printing no longer works
on Windows 7 with 2021-10 monthly rollup patch (KB5006743).

Windows uses NTLMSSP with privacy at the DCERPC layer on top
of NCACN_NP (smb).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14867

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
librpc/rpc/dcesrv_auth.c
librpc/rpc/dcesrv_core.c
librpc/rpc/dcesrv_core.h
source3/rpc_server/rpc_config.c
source3/rpc_server/rpc_worker.c
source4/rpc_server/service_rpc.c