New uid_wrapper with full threading support.
Today I’ve released a new version of uid_wrapper (1.1.0) with full threading support. Robin Hack a colleague of mine spent a lot of time improving the code and writing tests for it. It now survives...
View ArticleClik here to view.
Hunting down a fd closing bug in Samba
In Samba I had a failing test suite. I have nss_wrapper compiled with debug messages turned on, so it showed me the following line: NWRAP_ERROR(23052) - nwrap_he_parse_line: 3 Invalid line[TDB]: 'DB'...
View ArticleClik here to view.
uid_wrapper-1.2.0 released!
I’ve just released uid_wrapper-1.2.0, a testing tool to fake privilege separation! The new version correctly checks privileges when changing IDs and has a lot more tests! Learn more at https://cwrap.org.
View ArticleMicrosoft Catalog Files and Digital Signatures decoded
TL;DR: Parse and print .cat files: parsemscat Introduction Günther Deschner and myself are looking into the new Microsoft Printing Protocol [MS-PAR]. Printing always means you have to deal with...
View ArticleSamba 4.7.0 (Samba AD for the Enterprise)
Enterprise distributions like Red Hat or SUSE are required to ship with MIT Kerberos. The reason is that several institutions or governments have a hard requirement for a special Kerberos...
View ArticleClik here to view.
Samba and GnuTLS
TL;DR SMB3 file transfer with encryption will be 4-6 times faster with Samba 4.12Samba is getting out of the crypto businessGnuTLS >= 3.4.7 requiredFIPS compliance ahead Introduction More or less...
View Articlesocket_wrapper 1.3.0 and fd-passing
A new version of socket_wrapper has just been released. In short, socket_wrapper is a library passing all socket communications through unix sockets. It aims to help client/server software development...
View ArticleClik here to view.
Improved cmdline UX in upcoming Samba 4.15
To the newcomer, Samba’s command line user interface appears to be a haphazard jumble of scripts and binaries with options and design principles that fade in and out of use according to some esoteric...
View ArticleClik here to view.
Sliced bread: git-worktree and bare repo
The git versioning system has two really nice features you might already heard about. One of them is git-worktree and the other are bare git repositories. This makes my life a lot easier working on...
View ArticleClik here to view.
Local authentication hub
by Alexander Bokovoy and Andreas Schneider FOSDEM 2025 is just behind us and it was a great event as always. Alexander and I had a chance to talkabout the local authentication hub project. Our FOSDEM...
View Article