Search results

...ba.org/show_bug.cgi?id=13690 BUG #13690]: smbd: uid: Don't crash if 'force group' is added to an existing share connection. ...gi?id=13812 BUG #13812]: access_check_max_allowed() doesn't process "Owner Rights" ACEs.

* CVE-2021-20254: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token. ...calling code to return those values into the process token that stores the group membership for a user.

....org/show_bug.cgi?id=14141 BUG #14141]: winbind: Provide passwd struct for group sid with ID_TYPE_BOTH mapping (again). ...]: GPO security filtering based on the groups in Kerberos PAC (but primary group is missing).

...ine account simply does not have the rights to ask for an arbitrary user's group memberships. ...n to a Samba server, the domain controller correctly calculates the user's group memberships authoritatively and makes the information available to the Samb

...ugzilla.samba.org/show_bug.cgi?id=11362 BUG #11362]: Add PrimaryGroupId to group array in DC response. ...ba.org/show_bug.cgi?id=13690 BUG #13690]: smbd: uid: Don't crash if 'force group' is added to an existing share connection.

...he share path the current accessing user should have DIRECTORY_LIST access rights in order to view the current snapshots. ...https://bugzilla.samba.org/show_bug.cgi?id=11328 BUG #11328]: Use resource group sids obtained from pac logon_info.

...with a directory handle open only for FILE_READ_ATTRIBUTES (minimal access rights) could be used to obtain change notify replies from the server. These repli ...ow_bug.cgi?id=14296 BUG #14296]: 'samba-tool group' commands do not handle group names with special chars correctly.

...he share path the current accessing user should have DIRECTORY_LIST access rights in order to view the current snapshots. :* [https://bugzilla.samba.org/show_bug.cgi?id=11315 BUG #11315]: Group creation: Add msSFU30Name only when --nis-domain was given.

...value in place the whole object is also not visible without administrative rights. Group mismatch: SY (in ref) DA(in current)

...?name=CVE-2014-8143 CVE-2014-8143]: dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl. ...CVE-2013-6442]: ensure we don't lose an existing ACL when setting owner or group owner.

...he share path the current accessing user should have DIRECTORY_LIST access rights in order to view the current snapshots. * This means DCs of domain A can grant domain admin rights in domain B.

...In general, a keyfile is created and placed on the filesystem with access rights set so that only the involved program can access. SMBTA is using two keys, ...second key. This has been done to enable separate access restrictions. The group of people who may be able to use client programs, may be different from tho

...BUG #12466]: lib: security: se_access_check() incorrectly processes owner rights (S-1-3-4) DENY ace entries. ...n handling linked attributes, particularly in large domains with over 1000 group memberships or other links.