tailscale/ipn/ipnserver
Aaron Klotz d7962e3bcf ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals.
Our current workaround made the user check too lax, thus allowing deleted
users. This patch adds a helper function to winutil that checks that the
uid's SID represents a valid Windows security principal.

Now if `lookupUserFromID` determines that the SID is invalid, we simply
propagate the error.

Updates https://github.com/tailscale/tailscale/issues/869

Signed-off-by: Aaron Klotz <aaron@tailscale.com>
2022-02-02 15:01:28 -07:00
..
proxyconnect.go logpolicy, ipn/ipnserver: connect to logtail via tailscaled when needed 2021-12-17 14:40:26 -08:00
server_test.go safesocket: add ConnectionStrategy, provide control over fallbacks 2021-12-09 15:46:38 -08:00
server.go ipn/ipnserver, util/winutil: update workaround for os/user.LookupId failures on Windows to reject SIDs from deleted/invalid security principals. 2022-02-02 15:01:28 -07:00