mirror of
https://github.com/samba-team/samba.git
synced 2024-12-28 07:21:54 +03:00
9b78af1f64
> Here's the problem I hit:
>
> getgrnam("foo") -> nscd -> NSS -> winbindd ->
> winbindd_passdb.c:nam_to_sid() -> lookup_global_sam_name() ->
> getgrnam("foo") -> nscd -> ....
>
> This is in the SAMBA_3_0 specifically but in theory could happen
> SAMBA_3_0_25 (or 26) for an unknown group.
>
> The attached patch passes down enough state for the
> name_to_sid() call to be able to determine the originating
> winbindd cmd that came into the parent. So we can avoid
> making more NSS calls if the original call came in trough NSS
> so we don't deadlock ? But you should still service
> lookupname() calls which are needed for example when
> doing the token access checks for a "valid groups" from
> smb.conf.
>
> I've got this in testing now. The problem has shown up with the
> DsProvider on OS X and with nscd on SOlaris and Linux.
(This used to be commit
|
||
|---|---|---|
| .. | ||
| login_cache.c | ||
| lookup_sid.c | ||
| machine_sid.c | ||
| passdb.c | ||
| pdb_compat.c | ||
| pdb_get_set.c | ||
| pdb_interface.c | ||
| pdb_ldap.c | ||
| pdb_nds.c | ||
| pdb_smbpasswd.c | ||
| pdb_tdb.c | ||
| secrets.c | ||
| util_builtin.c | ||
| util_unixsids.c | ||
| util_wellknown.c | ||