Hacker News new | ask | show | jobs
by mschuster91 2754 days ago
> You'd have to be a privileged user to create such high uid user.

Or use a broken / misconfigured AD/LDAP to sync uid/gid across a pool of machines.
1 comments
userbinator 2754 days ago
...which implies already having high privileges. (How do users with such high UIDs come into existence?)
link
jaxtellerSoA 2754 days ago
>which implies already having high privileges. (How do users with such high UIDs come into existence?)

I am not so sure about that. I work at a smallish, place and by default my AD account has UID of 945004649. Still under the INT_MAX but not that far off. Our domain controller is running Windows 2012 R2, and nothing was changed or touched regarding UID's, everything was left at the default. We just create users and get whatever UID AD assigns.

link
LinuxBender 2753 days ago
This could happen anywhere. If you know that dynamically created users are in range {x} and AD/LDAP users are in range {y}, then a good sysadmin would choose a very high range for batch creations of specific types of accounts. This is fairly common practice. Modern Linux and Windows can support millions of UID's, so it is perfectly reasonable to say, "We are going to use range {y} for this project then nuke that entire range when we are done".
link
pixl97 2754 days ago
Active directory integration into Linux. Default numbers in the config files are very large.
link