[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via a5235a9d05b librpc/idl: Alias the DS_ constants in netlogon.idl to
the NBT_SERVER equivilants
via 4caab32f08f librpc/idl: Use nbt_server_type instead of
netr_DsR_DcFlags netlogon.idl
via 089f555eb73 librpc/idl: Merge missing bits into nbt_server_type in
nbt.idl
via 22d0aa53bfb s4-dsdb:large_ldap: Call setUpClass() method of base
class
via e77c249dd54 pytest: dcerpc/dnsserver: Call setUpClass() method of
base class
via d2892010e6c pytest: dcerpc/dnsserver: Remove unused import
via c9e12a8d982 pyldb: Fix leak
via 715c45da6ec tests/auth_log: Simplify isRemote()
via 59378dddbfa tests/auth_log: Rename ‘self’ parameter to ‘cls’
via ea7b82ad93d tests/auth_log: Call setUpClass() method of base class
via 781990577a5 tests/auth_log: Don’t silently override remoteAddress
via b421d2d5cf6 tests/auth_log_winbind: Expect an empty remote address
via f89b0cdbbc4 tests/audit_log: Pre-compile GUID regex
via 8dea2a43456 s4:kdc: Move parameter comments adjacent to parameters
via 200117f5edf audit_tests: Check return value of json_new_array()
via 80b3752052a s3:utils: Check return value of json_new_object()
via 3ce2803f6dd lib:audit_logging:tests: Check return value of
json_new_{object,array}()
via 281b616ac74 lib:audit_logging: Check return value of
json_new_object()
via 65923be91e4 s4:kdc: Use talloc_steal() rather than
talloc_reference()
via e843e590760 s4:kdc: Make parameters const
via fc212116dcb s4:kdc: Make functions static
via 46677077203 s4:auth: Allocate user_info_dc->sids on correct talloc
context
via f0ec5763e6d s4:kdc: Allocate user_info_dc->sids on correct talloc
context
via 480060ecd34 selftest: Report better error message if environment is
unknown
via a1a1adb7b72 s4/messaging/py: Fix typo
via ca987dcb417 s4/messaging/py: Fix leaks
via 3ce96c9ebd0 s4/messaging/py: Fix leak of p_server_id
via 4c67cac68b7 s4/messaging/py: Check py_return_ndr_struct() return
value
via 28536f32daf s4/messaging/py: Fix callback return value leak
via cfd80303f19 s4/messaging/py: Fix leak
via b22c2179952 s4/messaging/py: Fix leaks
via 77d8b6762f9 s4/messaging: Return the number of
previously-registered functions that are removed
via e29c3374bcf s4/messaging/py: Fix typo
via 48602b0e298 s4/messaging/py: Add more helpful error message for a
wrongly-sized tuple
via f6b1307a852 s4/messaging/py: Document lp_ctx parameter of
messaging.Messaging()
via f320b73ba6a s4/messaging/py: Remove incorrect function names in
messaging.Messaging()
via a57b1cc05dd pyglue: Raise an exception on error
via d5df0b463ee pyglue: Check generate_random_str() return value
via 98fcd47451b pyglue: Fix typo
via 7e32c7655df s4:kdc: Note correct constant
from f1a204d3154 gp: sshd policy correctly sort policy
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit a5235a9d05be3e2247534beb3cd8e49a64394bf5
Author: Andrew Bartlett
Date: Tue May 23 15:22:49 2023 +1200
librpc/idl: Alias the DS_ constants in netlogon.idl to the NBT_SERVER
equivilants
Both the NBT_SERVER versions (in python scripts) and DS_ constants are
in use in freeIPA so we can not just drop one for the other without
discussion.
Signed-off-by: Andrew Bartlett
Reviewed-by: Joseph Sutton
Autobuild-User(master): Andrew Bartlett
Autobuild-Date(master): Wed May 24 01:52:28 UTC 2023 on atb-devel-224
commit 4caab32f08fba897c01ae35855d5d5380d02b0e5
Author: Andrew Bartlett
Date: Tue May 23 14:57:07 2023 +1200
librpc/idl: Use nbt_server_type instead of netr_DsR_DcFlags netlogon.idl
We should not keep two idential bitfield tables in two nearby IDL files.
However a number of python files in Samba and in freeIPA use the
nbt.NBT_SERVER_*
constants, so these are the better names to keep.
Signed-off-by: Andrew Bartlett
Reviewed-by: Joseph Sutton
commit 089f555eb735522e30207398837d657b8aa1988b
Author: Andrew Bartlett
Date: Tue May 23 14:45:39 2023 +1200
librpc/idl: Merge missing bits into nbt_server_type in nbt.idl
These bits are defined in netr_DsR_DcFlags in netlogon.idl already.
We need these new bits to announce FL 2012R2 and 2016 support.
Signed-off-by: Andrew Bartlett
Reviewed-by: Joseph Sutton
commit 22d0aa53bfba3e0e95a0ec7ff53d28d91dec98f9
Author: Joseph Sutton
Date: Tue May 23 14:59:24 2023 +1200
s4-dsdb:large_ldap: Call setUpClass() method of base class
Signed-off-by: Joseph Sutton
Reviewed-by: Andrew Bartlett
commit e77c249dd54088607d54a65b583f4585755712db
Author: Joseph Sutton
Date: Tue
[SCM] Samba Shared Repository - branch v4-17-test updated
The branch, v4-17-test has been updated via e1c3f8328cd rpc_server3: Pass winbind_env_set() state through to rpcd_* via 99f28fecf9d lib: Add security_token_del_npa_flags() helper function via c21560a03c9 rpc: Remove named_pipe_auth_req_info6->need_idle_server via f5323412879 rpc_server3: Use global_sid_Samba_NPA_Flags to pass "need_idle" via 270855cfdb5 named_pipe_auth: Bump info5 to info6 via 61a71886a14 rpc: Add global_sid_Samba_NPA_Flags SID via 9a3ae1d0da7 librpc: Simplify dcerpc_is_transport_encrypted() via 2d1e69dcc6e smbd: Use security_token_count_flag_sids() in open_np_file() via e8094b7913c libcli: Add security_token_count_flag_sids() via 98b8ffdb447 librpc/rpc: allow smb3_sid_parse() to accept modern encryption algorithms from 01d3f58321d VERSION: Bump version up to Samba 4.17.9... https://git.samba.org/?p=samba.git;a=shortlog;h=v4-17-test - Log - commit e1c3f8328cdcc04d5460a6d685d7189ca4dd5cf0 Author: Volker Lendecke Date: Tue Apr 18 12:47:04 2023 +0200 rpc_server3: Pass winbind_env_set() state through to rpcd_* Winbind can ask rpcd_lsad for LookupNames etc. This can recurse back into winbind for getpwnam. We have the "_NO_WINBINDD" environment variable set in winbind itself for this case, but this is lost on the way into rpcd_lsad. Use a flag in global_sid_Samba_NPA_Flags to pass this information to dcerpc_core, where it sets the variable on every call if requested. Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher Autobuild-User(master): Volker Lendecke Autobuild-Date(master): Tue May 16 11:54:32 UTC 2023 on atb-devel-224 (cherry picked from commit 59694ad0a4cc489f1baa4c2c94c6322c0f22c1df) Autobuild-User(v4-17-test): Jule Anger Autobuild-Date(v4-17-test): Tue May 23 08:09:23 UTC 2023 on sn-devel-184 commit 99f28fecf9d2ce6341412a357db258a5a2f2e348 Author: Volker Lendecke Date: Tue Apr 18 14:32:20 2023 +0200 lib: Add security_token_del_npa_flags() helper function Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher (cherry picked from commit bb3ea36e10079ad9c73c68d7ed8fce51ecb40ebe) commit c21560a03c9c1487ae2ec1755bd2bcf5ba946221 Author: Volker Lendecke Date: Tue Apr 18 12:29:34 2023 +0200 rpc: Remove named_pipe_auth_req_info6->need_idle_server Involves bumping up the version number Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher (cherry picked from commit bdba027a33e35aab7bb322bc3167cdd7babfc059) commit f5323412879a7b038e713a07de894775681aafff Author: Volker Lendecke Date: Tue Apr 18 12:28:28 2023 +0200 rpc_server3: Use global_sid_Samba_NPA_Flags to pass "need_idle" More code, but will be more flexible in the future. Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher (cherry picked from commit 31180e0e6d9e43d54e7656a56ed3af129f578105) commit 270855cfdb5909e8d942b5b92ee244a703963963 Author: Joseph Sutton Date: Thu Dec 22 17:48:26 2022 +1300 named_pipe_auth: Bump info5 to info6 In the next commit, we shall replace the 'authenticated' field of named_pipe_auth_req_info.info5.session_info.session_info.info with a more general 'user_flags' field. Signed-off-by: Joseph Sutton Reviewed-by: Andrew Bartlett (cherry picked from commit 8aef16bbbc1e55f0a9f5a8ec87e5348688d93785) commit 61a71886a14a6e6626b79bfc33a99a32c312c197 Author: Volker Lendecke Date: Tue Apr 18 12:09:45 2023 +0200 rpc: Add global_sid_Samba_NPA_Flags SID This will be used as a flexible way to pass per-RPC-connection flags over ncalrpc to the RPC server without having to modify named_pipe_auth_req_info6 every time something new needs to be passed. It's modeled after global_sid_Samba_SMB3. Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher (cherry picked from commit ebbb93cc7a57a118b82b8f383d25f1eb022397d6) commit 9a3ae1d0da7de09a014a1bab5c0b1ff3f23509b1 Author: Volker Lendecke Date: Tue Apr 18 12:04:17 2023 +0200 librpc: Simplify dcerpc_is_transport_encrypted() Simplify logic by using security_token_count_flag_sids() Bug: https://bugzilla.samba.org/show_bug.cgi?id=15361 Signed-off-by: Volker Lendecke Reviewed-by: Stefan Metzmacher (cherry picked from commit 1d11e0489b2c91fc05c6befc0463695d7102abcc) commit 2d1e69dcc6ed45f1a2f49f3cd79a1554c7136960 Author: Volker Lendecke Date: Tue Apr 18 12:01:02 2023 +0200 smbd:
