fdo-mirrors/dbus
1
0
Fork 0
mirror of https://gitlab.freedesktop.org/dbus/dbus.git synced 2026-04-20 20:00:38 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

spec: Define what non-empty authorization identity strings mean

Browse source 
The SASL RFC requires that we do this. I had previously thought that
the D-Bus protocol on Unix requires the use of numeric user IDs,
but in fact the reference implementation will also accept usernames.

Signed-off-by: Simon McVittie <smcv@collabora.com>
Reviewed-by: Philip Withnall <withnall@endlessm.com>
Reviewed-by: David Herrmann <dh.herrmann@gmail.com>
Bug: https://bugs.freedesktop.org/show_bug.cgi?id=104224
This commit is contained in:
Simon McVittie 2017-12-12 13:10:11 +00:00
parent c61271acba
commit cba9179a46
1 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
doc/dbus-specification.xml
View file

@ -2236,6 +2236,32 @@
directly from the SASL specification. The message encoding is
NOT used here, only plain text messages.
</para>
<para>
Using SASL in D-Bus requires that we define the meaning of non-empty
authorization identity strings. When D-Bus is used on Unix platforms,
a non-empty SASL authorization identity represents a Unix user. An
authorization identity consisting entirely of ASCII decimal digits
represents a numeric user ID as defined by POSIX, for example
<literal>0</literal> for the root user or <literal>1000</literal>
for the first user created on many systems. Non-numeric authorization
identities are not required to be accepted or supported, but if used,
they must be interpreted as a login name as found in the
<literal>pw_name</literal> field of POSIX
<literal>struct passwd</literal>, for example
<literal>root</literal>, and normalized to the corresponding
numeric user ID. For best interoperability, clients and servers
should use numeric user IDs.
</para>
<para>
When D-Bus is used on Windows platforms, a non-empty SASL
authorization identity represents a Windows security identifier
(SID) in its string form, for example
<literal>S-1-5-21-3623811015-3361044348-30300820-1013</literal> for
a domain or local computer user or <literal>S-1-5-18</literal> for
the LOCAL_SYSTEM user. The user-facing usernames such as
<literal>Administrator</literal> or <literal>LOCAL_SYSTEM</literal>
are not used in the D-Bus protocol.
</para>
<para>
In examples, "C:" and "S:" indicate lines sent by the client and
server respectively. The client sends the first line, and the