search for: geteuid

On Wed, 2019-10-23 at 22:21 -0700, Jeremy Allison wrote: > On Wed, Oct 23, 2019 at 11:58:33PM +0000, Jon Gerdes wrote: > > winbind has a concept of offline and online but I don't know what > > that > > is, nor how nss works with it. I've tried using smbcontrol to tell > > winbind it is offline or online but that does not seem to work. > > Restarting

...41202_100852", 0x7fff5f0b8770) = -1 *ENOENT* (No such file or directory) writev(28, [{"\0\0\0\207\377SMB\242\0\0\0\0\210\3\300\0\0\0\0\0\0\0\0\0\0\0\0\1\0\340\3"..., 139}], 1) = -1 EPIPE (Broken pipe) stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2593, ...}) = 0 *geteuid() = 504* fstat(34, {st_mode=S_IFREG|0644, st_size=24713, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4d64ee9000 lseek(34, 0, SEEK_CUR) = 24713 write(34, "[2014/12/02 10:43:18.654245, 1]"..., 6...

On Tue, Dec 16, 2014 at 03:40:08PM +0100, Nacho del Rey wrote: > Hi there > > In an Oracle RAC cluster using ACFS (as file-system) where we have a samba > server for sharing files to windows clients, we are suffering a strange > issue, from time to time, which it causes the Windows clients lock for a > while (10 min or a bit more) or even indefinitely when they are working >

...> I've encountered an issue with connecting to the samba DC's DNS service from DNS > Manager tool (under Windows). It says "Active Directory service is not > available". > > While digging into it, I've found the samba rpc worker throws an error: > [pid 18398] geteuid() = 0 > [pid 18398] write(3, "[2020/03/18 18:36:21.694834, 2] ../../source4/rpc_server/dnsserver/dnsdb.c:144(dnsserver_db_enumerate_zones)\n", 110) = 110 > [pid 18398] geteuid() = 0 > [pid 18398] write(3, " dnsserver: Found DNS zone doma...

...db_smbpasswd.c:startsmbfilepwent(171) startsmbfilepwent_internal: unable to open file /usr/local/private/smbpasswd. Error was Permission denied [2001/12/07 04:13:10, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1459) unable to open passdb database. Ktrace shows the following: 1250 smbd CALL geteuid 1250 smbd RET geteuid 1003/0x3eb 1250 smbd CALL write(0x16,0xbfbfe7f4,0x47) 1250 smbd GIO fd 22 wrote 71 bytes "[2001/12/07 03:23:24, 10] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1453) " 1250 smbd RET write 71/0x47 1250 smbd CALL geteuid...

...BJECT_NAME_NOT_FOUND ----------------------- Here's an strace of smbd (also abridged); notice that the real uid 501 corresponds to the one chosen by the "net use" command: ----------------------- write(20, "[2008/04/29 02:35:56, 10] lib/util.c:dump_data(2264)\n", 53) = 53 geteuid() = 501 write(20, " [000] 00 5C 00 65 00 70 00 6D 00 61 00 70 00 70 00 65 .\\.e.p.m .a.p.p.e\n", 76) = 76 geteuid() = 501 write(20, " [010] 00 72 00 00 00 .r... \n", 65) = 65 sta...

...nux) to see what it's up to. > > > > Jeremy. > > So after one day I have ~50 left-over sessions. Running strace as above I > seem to usually get... > > select(32, [5 23 31], [], NULL, {43, 450000}) = 0 (Timeout) > gettimeofday({1224652458, 61107}, NULL) = 0 > geteuid() = 0 > getegid() = 0 > setgroups(0, []) = 0 > setresgid(4294967295, 0, 4294967295) = 0 > getegid() = 0 > setresuid(0, 0, 4294967295) = 0 > geteuid()...

...AVED_IDS_WORK_WITH_SETEUID /* Propagate the privileged gid to all of our gids. */ if (setgid(getegid()) < 0) debug("setgid %u: %.100s", (u_int) getegid(), strerror(errno)); /* Propagate the privileged uid to all of our uids. */ if (setuid(geteuid()) < 0) debug("setuid %u: %.100s", (u_int) geteuid(), strerror(errno)); #endif /* SAVED_IDS_WORK_WITH_SETEUID */ if (setegid(pw->pw_gid) < 0) fatal("setegid %u: %.100s", (u_int) pw->pw_gid, strerror(errno));...

...1-dist/auth-sia.c Mon Jun 2 19:25:48 2003 +++ openssh-3.7p1/auth-sia.c Tue Sep 16 14:02:56 2003 @@ -80,6 +80,7 @@ { SIAENTITY *ent = NULL; const char *host; + uid_t uid; host = get_canonical_hostname(options.use_dns); @@ -103,8 +104,11 @@ sia_ses_release(&ent); - if (setreuid(geteuid(), geteuid()) < 0) - fatal("setreuid: %s", strerror(errno)); + uid = geteuid(); + if (setuid(0) < 0) + fatal("setuid: %s", strerror(errno)); + if (setuid(uid) < 0) + fatal("setuid: %s", strerror(errno)); } #endif /* HAVE_OSF_SIA */ diff -urN openssh-3.7...

Hello Rowland, >> During the migration from Windows DCs to Samba DCs, the following issue came up: >> after transferring PDC emulator role to a samba DC, the according DNS record >> wasn't re-created: >> > Yes and no (well not in the way you are thinking) > Yes, you are missing the fact that the dns_update_list has this: > # The PDC emulator >

Hi, When are client sessions closed? Let me explain what I'm trying to do... we're in a School district and we try to stop kids logging more than once. They way I did this before was to dump the active sessions from our previous Server2003 fileserver into a file once a minute and process it with a Perl script to check who was connected from where, rebooting machines remotely as

Any way to check if another proc has run or been run by a proc that is setuid or seteuid?

Hi Jones, many thanks for your reply. Yepp, I'm using ACL's (Posix ACL's) on filesystem to regulate the access of users for files and directories. Do you mean that this is the "normal" way? These geteuid and getegid system calls are so slow? On the previous system (Debian Wheezy, Samba 3) I've also used ACL's, but there were much faster than this... What should be the solution? Do you have any idea? Thanks, Ervin On Mon, Apr 20, 2015 at 10:48:37AM +0800, Jones Syue wrote: > Hello...

...= -1, user_groupslen = -1; - + /* * Temporarily changes to the given uid. If the effective user * id is not root, this does nothing. This call cannot be nested. @@ -44,42 +48,57 @@ void temporarily_use_uid(struct passwd *pw) { - /* Save the current euid, and egroups. */ - saved_euid = geteuid(); - debug("temporarily_use_uid: %d/%d (e=%d)", - pw->pw_uid, pw->pw_gid, saved_euid); - if (saved_euid != 0) { - privileged = 0; - return; - } - privileged = 1; - temporarily_use_uid_effective = 1; + /* Save the current euid, and egroups. */ +#ifdef SAVED_IDS_WORK_WIT...

This patchset allow syscalls (flock, ipc, getuid, geteuid and ioctl), so openssl engines, e.g. OpenSSL-ibmca and OpenSSL-ibmpkcs11, can work and communicate with the crypto cards during ssh login. 1. The flock and ipc are allowed only for s390 architecture. They are needed for openCryptoki project (PKCS#11 implementation), as the ibmpkcs11 engine makes u...

Rowland, I've encountered an issue with connecting to the samba DC's DNS service from DNS Manager tool (under Windows). It says "Active Directory service is not available". While digging into it, I've found the samba rpc worker throws an error: [pid 18398] geteuid() = 0 [pid 18398] write(3, "[2020/03/18 18:36:21.694834, 2] ../../source4/rpc_server/dnsserver/dnsdb.c:144(dnsserver_db_enumerate_zones)\n", 110) = 110 [pid 18398] geteuid() = 0 [pid 18398] write(3, " dnsserver: Found DNS zone domain.com\n",...

...tered an issue with connecting to the samba DC's DNS service from DNS >> Manager tool (under Windows). It says "Active Directory service is not >> available". >> >> While digging into it, I've found the samba rpc worker throws an error: >> [pid 18398] geteuid() = 0 >> [pid 18398] write(3, "[2020/03/18 18:36:21.694834, 2] ../../source4/rpc_server/dnsserver/dnsdb.c:144(dnsserver_db_enumerate_zones)\n", 110) = 110 >> [pid 18398] geteuid() = 0 >> [pid 18398] write(3, " dnsserver: Found D...

...retrieving revision 1.227 diff -u -p -r1.227 session.c --- session.c 7 Jan 2003 06:38:59 -0000 1.227 +++ session.c 9 Jan 2003 22:23:15 -0000 @@ -1204,7 +1204,7 @@ void do_setusercontext(struct passwd *pw) { #ifdef HAVE_CYGWIN - if (is_winnt) { + { #else /* HAVE_CYGWIN */ if (getuid() == 0 || geteuid() == 0) { #endif /* HAVE_CYGWIN */ @@ -1257,6 +1257,9 @@ do_setusercontext(struct passwd *pw) permanently_set_uid(pw); #endif } +#ifdef HAVE_CYGWIN + if (is_winnt) +#endif if (getuid() != pw->pw_uid || geteuid() != pw->pw_uid) fatal("Failed to set uids to %u.", (u_int) p...

Hi all, On Thu, Apr 16, 2015 at 03:00:49PM -0700, Jeremy Allison wrote: > On Thu, Apr 16, 2015 at 08:42:48PM +0200, Ervin Heged?s wrote: > > Dear Samba users, > > > > here is an Ubuntu 14.04, with Samba 4 (4.1.6), and LDAP (slapd > > 2.4.31). The config came from a previous system (Debian Squeezy), > > which had been crashed (HW error - on this new machine,

...oot() if it is + * a domain admin, updating his own machine password. (Otherwise the + * pdb_ calls fail for non-root.) + * More precisely: bracket pdb_getsampwrid if I am a domain admin; then + * also bracket pdb_update_sam_account if rid is my own machine account. + */ + do_become_root = 0; + if (geteuid()) { + struct passwd* pass; + /* Should we use current_user->uid, or current_user->conn->uid + * and current_user->conn->user, for any of this? */ + if ( (pass=sys_getpwuid(geteuid())) != NULL ) { + if ( user_in_list(pass->pw_name, lp_domain_admin_group()) ) { +...