1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/source3
Stefan Metzmacher 8591d94243 smbXsrv_client: notify a different node to drop a connection by client guid.
If a client disconnected all its interfaces and reconnects when
the come back, it will likely start from any ip address returned
dns, which means it can try to connect to a different ctdb node.
The old node may not have noticed the disconnect and still holds
the client_guid based smbd.

Up unil now the new node returned NT_STATUS_NOT_SUPPORTED to
the SMB2 Negotiate request, as messaging_send_iov[_from]() will
return -1/ENOSYS if a file descriptor os passed to a process on
a different node.

Now we tell the other node to teardown all client connections
belonging to the client-guid.

Note that this is not authenticated, but if an attacker can
capture the client-guid, he can also inject TCP resets anyway,
to get the same effect.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15159

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Sep  2 20:59:15 UTC 2022 on sn-devel-184
2022-09-02 20:59:15 +00:00
..
auth s3:auth: Zero memory in sam_password_ok() 2022-08-26 07:59:32 +00:00
build
client s3/client: fix dfs deltree, resolve dfs path 2022-06-17 17:12:07 +00:00
exports
groupdb
include libsmb: Allow to request SMB311 posix in source3/libsmb 2022-09-02 13:31:38 +00:00
intl
lib lib: Fix a typo 2022-08-26 18:54:37 +00:00
libads s3:libads: Zero memory in ads_change_trust_account_password() 2022-08-26 07:59:32 +00:00
libgpo/gpext
libnet s3:libads: Allocate ads->auth.ccache_name under ADS_STRUCT talloc context 2022-06-27 15:50:30 +00:00
librpc smbXsrv_client: notify a different node to drop a connection by client guid. 2022-09-02 20:59:15 +00:00
libsmb pylibsmb: Add create_ex() 2022-09-02 13:31:38 +00:00
locale spelling: connnect encrytion exisit expection explicit invalide missmatch paramater paramter partion privilige relase reponse seperate unkown verson authencication progagated 2022-06-10 18:12:33 +00:00
locking s3:smbd: inline fsp_lease_type_is_exclusive() logic into contend_level2_oplocks_begin_default 2022-08-19 18:41:34 +00:00
modules Cleanup and bug fixes in vxfs vfs code. 2022-09-02 17:40:00 +00:00
nmbd source3: move lib/substitute.c functions out of proto.h 2021-11-11 13:49:32 +00:00
param param: Add "smb3 unix extensions" 2022-09-02 13:31:38 +00:00
passdb s3:passdb: Zero sensitive memory in lsa_secret_{set/get}_common() 2022-08-26 07:59:32 +00:00
printing s3: smbd: Convert driver_unix_convert() to use filename_convert_dirfsp(). 2022-08-04 18:10:43 +00:00
profile s3:profile: make use of tevent_cached_getpid() in performance critical code 2022-07-25 18:32:18 +00:00
registry registry3: Align an integer type 2022-07-25 12:04:33 +00:00
rpc_client s3:rpc_client: Implement dcerpc_samr_chgpasswd_user4() 2022-07-28 11:51:29 +00:00
rpc_server s3: smbd: Remove allow_broken_path from create_junction(). 2022-08-28 19:59:28 +00:00
rpcclient s3:rpcclient: Implement cmd chpasswd4 2022-07-28 11:51:29 +00:00
script s3:tests: add test_smbXsrv_client_cross_node.sh 2022-09-02 20:02:29 +00:00
selftest s3:tests: add test_smbXsrv_client_cross_node.sh 2022-09-02 20:02:29 +00:00
services s3:services: Disable rcinit-based service control code 2021-12-10 14:02:30 +00:00
smbd smbXsrv_client: notify a different node to drop a connection by client guid. 2022-09-02 20:59:15 +00:00
torture s3: torture: Add a comprehensive SMB1 DFS path torture tester. 2022-09-02 16:42:34 +00:00
utils s3:afs: Zero memory for afs_keyfile 2022-08-26 07:59:32 +00:00
web
winbindd s3/winbindd: Fix bad access to sid array (with debug level >= info) 2022-08-31 15:07:31 +00:00
.clang_complete
.dmallocrc
.indent.pro
Doxyfile
mainpage.dox
smbadduser.in
wscript source3/wscript: Detect glusterfs-api with *at() calls support 2022-08-26 16:31:37 +00:00
wscript_build s3:waf: Fix version number of public libsmbconf 2022-06-24 09:48:38 +00:00
wscript_configure_system_ncurses