Displaying 5 results from an estimated 5 matches for "check_reduced_name_with_privileg".
Did you mean:
check_reduced_name_with_privilege
2015 Dec 22
6
wide links and privileges
...@DomainAdmins
encrypt passwords = yes
unix extensions = no
wide links = yes
[perso]
path = %H/perso
read only = no
valid users = %U
write list = %U
In this share, I've a symlink to a directory ouside this share.
I've this error:
check_reduced_name_with_privilege: Bad access attempt: esu is a symlink
outside the share path
Option "wide links" is turn to "Yes", so we could access to this directory.
If I set "enable privileges" to "No" in Global section, all works fine.
When I read source code, I can see that check_...
2016 Jan 06
1
wide links and privileges
...pp_smb_fname)->base_name);
} else {
status = check_name_with_privilege(conn, smbreq,
(*pp_smb_fname)->base_name);
}
```
which redirects us to the `check_name` or the
`check_name_with_privilege` function.
which themselves respectively redirects to the `check_reduced_name` and
`check_reduced_name_with_privilege` functions:
source3/smbd/vfs.c:
```
NTSTATUS check_reduced_name(connection_struct *conn, const char *fname)
[...]
/* Common widelinks and symlinks checks. */
if (!allow_widelinks || !allow_symlinks) {
[...]
if (strncmp(conn_rootdir, resolved_name,
rootdir_len) != 0...
2016 Jan 06
3
wide links and privileges
...t; status = check_name_with_privilege(conn, smbreq,
> (*pp_smb_fname)->base_name);
> }
> ```
>
> which redirects us to the `check_name` or the
> `check_name_with_privilege` function.
> which themselves respectively redirects to the `check_reduced_name` and
> `check_reduced_name_with_privilege` functions:
>
> source3/smbd/vfs.c:
> ```
> NTSTATUS check_reduced_name(connection_struct *conn, const char *fname)
> [...]
> /* Common widelinks and symlinks checks. */
> if (!allow_widelinks || !allow_symlinks) {
> [...]
> if (strncmp(conn_rootdir, res...
2016 Jan 07
0
wide links and privileges
...gt; status = check_name_with_privilege(conn, smbreq,
> (*pp_smb_fname)->base_name);
> }
> ```
>
> which redirects us to the `check_name` or the
> `check_name_with_privilege` function.
> which themselves respectively redirects to the `check_reduced_name` and
> `check_reduced_name_with_privilege` functions:
>
> source3/smbd/vfs.c:
> ```
> NTSTATUS check_reduced_name(connection_struct *conn, const char *fname)
> [...]
> /* Common widelinks and symlinks checks. */
> if (!allow_widelinks || !allow_symlinks) {
> [...]
> if (strncmp(conn_rootdir, reso...
2015 Dec 22
0
wide links and privileges
...ensions = no
> wide links = yes
>
> [perso]
> path = %H/perso
> read only = no
> valid users = %U
> write list = %U
>
> In this share, I've a symlink to a directory ouside this share.
>
> I've this error:
>
> check_reduced_name_with_privilege: Bad access attempt: esu is a symlink
> outside the share path
>
> Option "wide links" is turn to "Yes", so we could access to this
> directory.
>
> If I set "enable privileges" to "No" in Global section, all works fine.
>
> When I...