Aaron Klotz d7962e3bcf ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals. ... Our current workaround made the user check too lax, thus allowing deleted users. This patch adds a helper function to winutil that checks that the uid's SID represents a valid Windows security principal. Now if `lookupUserFromID` determines that the SID is invalid, we simply propagate the error. Updates https://github.com/tailscale/tailscale/issues/869 Signed-off-by: Aaron Klotz <aaron@tailscale.com>		2022-02-02 15:01:28 -07:00
..
ipnlocal	ipn/ipnlocal, wgengine/netstack: use netstack for peerapi server	2022-01-31 14:20:08 -08:00
ipnserver	ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals.	2022-02-02 15:01:28 -07:00
ipnstate	ipn/ipnstate: add TailnetName to status	2022-01-26 10:08:39 -08:00
localapi	ipn/ipnserver: add TS_PERMIT_CERT_UID envknob to give webservers cert access	2022-01-25 12:12:41 -08:00
policy	ipn/policy: treat DNS service as interesting so it's not filtered out	2021-12-03 12:55:54 -08:00
store/aws	ipn/store/aws: support using sub-paths in parameters	2021-11-29 07:48:01 -08:00
backend.go	ipn: use key.NodePublic instead of tailcfg.NodeKey	2021-11-01 20:32:10 -07:00
doc.go	Move Linux client & common packages into a public repo.	2020-02-09 09:32:57 -08:00
fake_test.go	ipn{,/ipnlocal}, cmd/tailscale/cli: don't check pref reverts on initial up	2021-04-18 08:12:18 -07:00
handle.go	ipn: another controlplane synonym	2021-07-13 08:22:10 -07:00
message_test.go	ipn: allow b to be nil in NewBackendServer	2021-05-19 09:33:19 -07:00
message.go	ipn: don't log IPN messages that may contain an authkey.	2021-09-22 20:32:49 -07:00
prefs_clone.go	wgengine/netstack: add an SSH server experiment	2022-01-24 19:14:13 -08:00
prefs_test.go	wgengine/netstack: add an SSH server experiment	2022-01-24 19:14:13 -08:00
prefs.go	wgengine/netstack: add an SSH server experiment	2022-01-24 19:14:13 -08:00
store_test.go	ipn: test TestFileStore in a fresh subdirectory	2021-09-24 15:05:10 -07:00
store.go	ipn: remove mention of wgkey in comment.	2021-10-28 10:40:44 -07:00