mirrors
/
tailscale
mirror of https://github.com/tailscale/tailscale.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
tailscale/ipn
History
Aaron Klotz d7962e3bcf ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals. 
Our current workaround made the user check too lax, thus allowing deleted
users. This patch adds a helper function to winutil that checks that the
uid's SID represents a valid Windows security principal.

Now if `lookupUserFromID` determines that the SID is invalid, we simply
propagate the error.

Updates https://github.com/tailscale/tailscale/issues/869

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
 		2022-02-02 15:01:28 -07:00
..
ipnlocal ipn/ipnlocal, wgengine/netstack: use netstack for peerapi server 2022-01-31 14:20:08 -08:00
ipnserver ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals. 2022-02-02 15:01:28 -07:00
ipnstate ipn/ipnstate: add TailnetName to status 2022-01-26 10:08:39 -08:00
localapi ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access 2022-01-25 12:12:41 -08:00
policy ipn/policy: treat DNS service as interesting so it's not filtered out 2021-12-03 12:55:54 -08:00
store/aws ipn/store/aws: support using sub-paths in parameters 2021-11-29 07:48:01 -08:00
backend.go ipn: use key.NodePublic instead of tailcfg.NodeKey 2021-11-01 20:32:10 -07:00
doc.go Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
fake_test.go ipn{,/ipnlocal}, cmd/tailscale/cli: don't check pref reverts on initial up 2021-04-18 08:12:18 -07:00
handle.go ipn: another controlplane synonym 2021-07-13 08:22:10 -07:00
message.go ipn: don't log IPN messages that may contain an authkey. 2021-09-22 20:32:49 -07:00
message_test.go ipn: allow b to be nil in NewBackendServer 2021-05-19 09:33:19 -07:00
prefs.go wgengine/netstack: add an SSH server experiment 2022-01-24 19:14:13 -08:00
prefs_clone.go wgengine/netstack: add an SSH server experiment 2022-01-24 19:14:13 -08:00
prefs_test.go wgengine/netstack: add an SSH server experiment 2022-01-24 19:14:13 -08:00
store.go ipn: remove mention of wgkey in comment. 2021-10-28 10:40:44 -07:00
store_test.go ipn: test TestFileStore in a fresh subdirectory 2021-09-24 15:05:10 -07:00