DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 4AFFQcht1307184
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org B5C393858D3C
Date: Sat, 16 Nov 2024 00:21:22 +0900
To: cygwin@cygwin.com
Subject: Re: SMBFS mount's file cannot be made executable
Message-Id: <20241116002122.3f4fd325a497eb4261ad80f4@nifty.ne.jp>
In-Reply-To: <20241114010807.99f46760b2240d472440c329@nifty.ne.jp>
References: <20241111193152.c3a81044a03ecf2093185166@nifty.ne.jp>
 <ZzHizX_6FXABDPvZ@calimero.vinschen.de>
 <20241111201928.811a2f8f09142b7aa8fe9bdc@nifty.ne.jp>
 <20241111203202.b22bcf4f9030aff58299fe0e@nifty.ne.jp>
 <20241111204051.493f12208bb59d62b699dd28@nifty.ne.jp>
 <ZzHyhoWnNvkTQYW-@calimero.vinschen.de>
 <20241111211953.605b186566ce3a44ca929788@nifty.ne.jp>
 <ZzIIO2NxmdYpox2A@calimero.vinschen.de>
 <20241112042937.740185a42d476993b4b1e31c@nifty.ne.jp>
 <20241112175427.750ae77a8086594a765862c5@nifty.ne.jp>
 <ZzNCXz3o9k40U9zA@calimero.vinschen.de>
 <20241113181755.02289e8e8d9af7e19e8f4387@nifty.ne.jp>
 <CANV9t=SvYedzG-LmECwdT7kjipOyhgwsZ1yucnTm8mWMnNkJVw@mail.gmail.com>
 <20241114003740.e573d7ec79d35da76225c9f1@nifty.ne.jp>
 <CANV9t=TLh8xD7KBsF-MucZWNjP-L0KE04xUv2-2e=Z5fXTjk=w@mail.gmail.com>
 <20241114010807.99f46760b2240d472440c329@nifty.ne.jp>
Mime-Version: 1.0
Precedence: list
From: Takashi Yano via Cygwin <cygwin@cygwin.com>
Reply-To: Takashi Yano <takashi.yano@nifty.ne.jp>
Content-Type: text/plain; charset="utf-8"
Errors-To: cygwin-bounces~archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On Thu, 14 Nov 2024 01:08:07 +0900
Takashi Yano wrote:
> On Wed, 13 Nov 2024 08:58:21 -0700
> Bill Stewart wrote:
> > On Wed, Nov 13, 2024 at 8:38 AM Takashi Yano via Cygwin wrote:
> > 
> > Thanks. However, even after reading the document, I still didn't
> > > understand what strings I should set the members for auth for SMB...
> > >
> > > For example, as for Endpoint, the example for ncacn_np is mentioned,
> > > but not for ncacn_ip_tcp.
> > >
> > 
> > Perhaps this might help?
> > 
> >  https://learn.microsoft.com/en-us/windows/win32/rpc/string-binding
> 
> Thanks! I do not read it yet, however, it seems to help much.

I built a test program, whose important part is:

  AUTHZ_RESOURCE_MANAGER_HANDLE hManager = NULL;
  AUTHZ_CLIENT_CONTEXT_HANDLE hClient = NULL;
  AUTHZ_ACCESS_REQUEST AccessRequest = {0};
  AUTHZ_ACCESS_REPLY AccessReply = {0};

  AUTHZ_RPC_INIT_INFO_CLIENT authzRpcInitInfoClient = {0};

  WCHAR ObjectUuid[] = L"9a81c2bd-a525-471d-a4ed-49907c0b23da";
  WCHAR ProtSeq[] = L"ncacn_ip_tcp";
  WCHAR NetworkAddr[] = L"localhost";
  WCHAR Endpoint[] = L"135";

  authzRpcInitInfoClient.version = AUTHZ_INIT_INFO_VERSION_V1;
  authzRpcInitInfoClient.ObjectUuid = ObjectUuid;
  authzRpcInitInfoClient.ProtSeq = ProtSeq;
  authzRpcInitInfoClient.NetworkAddr = NetworkAddr;
  authzRpcInitInfoClient.Endpoint = Endpoint;

  AuthzInitializeRemoteResourceManager (&authzRpcInitInfoClient, &hManager);

  char buf[1024];
  PTOKEN_USER pTokenUser = (PTOKEN_USER) buf;
  DWORD len;

  GetTokenInformation(hToken, TokenUser, pTokenUser, 1024, &len);

  LUID luid = {0,};
  AuthzInitializeContextFromSid(0, pTokenUser->User.Sid, hManager,
                                NULL, luid, NULL, &hClient);


This test code fails at AuthzInitializeContextFromSid() with
RPC_S_UNKNOWN_IF. If AuthzInitializeRemoteResourceManager()
is replaced with AuthzInitializeResourceManager(), the error
does not occur.

I searched the combination of AuthzInitializeContextFromSid()
and RPC_S_UNKNOWN_IF, however nothing was found.

Any suggestion would be appreciated.

-- 
Takashi Yano <takashi.yano@nifty.ne.jp>

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple