tailscale

mirror of https://github.com/tailscale/tailscale.git synced 2025-01-05 23:07:44 +00:00

History

Aaron Klotz d7962e3bcf ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals.

Our current workaround made the user check too lax, thus allowing deleted
users. This patch adds a helper function to winutil that checks that the
uid's SID represents a valid Windows security principal.

Now if `lookupUserFromID` determines that the SID is invalid, we simply
propagate the error.

Updates https://github.com/tailscale/tailscale/issues/869

Signed-off-by: Aaron Klotz <aaron@tailscale.com>

2022-02-02 15:01:28 -07:00

ipnlocal

ipn/ipnlocal, wgengine/netstack: use netstack for peerapi server

2022-01-31 14:20:08 -08:00

ipnserver

ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals.

2022-02-02 15:01:28 -07:00

ipnstate

ipn/ipnstate: add TailnetName to status

2022-01-26 10:08:39 -08:00

localapi

ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access