ksmbd.adduser should check the username already in /etc/passwd

[wangyugui-e16]

Hi,

I created a user USER_A with ksmbd.adduser, login through windows 10 client,
and then create a file FILE_A on the backend filesystem ext4/btrfs from windows 10 client.

How the the uid/gid of the FILE_A is decided? Can we use the uid/gid of /etc/passwd file?

Best Regards

[wangyugui-e16]

It seems ksmbd use the uid/gid of /etc/passwd and /etc/groupd

Should we add the check of /etc/passwd and /etc/group in ksmbd.adduser?

[wangyugui-e16]

a dirty patch

0001-ksmbd.adduser-need-check-by-getpwnam.patch

[namjaejeon]

a dirty patch

Could you please explain more why this patch is needed ?

[wangyugui-e16]

if we allow userABC to access ksmb and then create a file(fileEFG).

Then what is owner:group of the file (fileEFG)?
should we use the uid/gid of userABC defined in /etc/passwd?
so we should check /etc/passwd when we do 'ksmbd.adduse'.

[namjaejeon]

Then what is owner:group of the file (fileEFG)?
should we use the uid/gid of userABC defined in /etc/passwd?

ksmbd gets the uid/gid corresponding to the username from /etc/passwd.

so we should check /etc/passwd when we do 'ksmbd.adduse'.

Yes. ksmbd.adduser check /etc/passwd for this. If there is no username in /etc/passwd, It will be guest uid/gid.

[wangyugui-e16]

>  If there is no username in /etc/passwd, It will be guest uid/gid.

If there is no username in /etc/passwd, It should deny the access?

[namjaejeon]

@neheb Rosen, Is it okay to reject login if there is no username in /etc/passwd ? I am wondering how openwrt register user id. N ormally, Embedded target like openwrt use read-only root filesystem, so /etv/passwd file seems to be read-only. My question is that openWRT need add new user ID who is not in /etc/passwd ?

[neheb]

OpenWrt uses squashfs+overlayfs to provide an r/w system. Writing to /etc/passwd is permitted and survives a sysupgrade,

Current init script does not write to /etc/passwd but could be modified to do so: https://github.com/openwrt/packages/blob/master/net/ksmbd-tools/files/ksmbd.init

[neheb]

ping @rmilecki

[namjaejeon]

@neheb @rmilecki Hm.. When I check ksmbd.init of openWRT, It seems not to use ksmbd.adduser(i.e. not register new user ID?). Is it true? How does openWRT add userID ? It will allow guests connections ? But I can not find "map to guest" in ksmbd.init...

[neheb]

it's an old init script. I assume users figure it out...

The original author abandoned OpenWrt and moved to Jellyfin.

@rmilecki wrote https://github.com/openwrt/packages/blob/master/net/ksmbd-tools/files/ksmbd.hotplug which I assume works for basic shares.