samba.git/lib/param/param_table.c, branch master

lib: Simplify num_parameters() with ARRAY_SIZE()

2025-11-10T13:29:30+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Anoop C S

smbd: Fix a few possible buffer read overruns

2025-11-10T13:29:30+00:00

... only happens with invalid smb.conf settings....

Signed-off-by: Volker Lendecke 
Reviewed-by: Anoop C S

config: add strong certificate binding enforcement

2025-10-10T01:27:31+00:00

This parameter controls the enforcement of Windows Certificate bindings as
outlined in "KB5014754: Certificate-based authentication changes on Windows
domain controllers",
when preforming certificate based kerberos authentication (PKINIT)

Signed-off-by: Gary Lockyer 
Reviewed-by: Jennifer Sutton

docs-xml/smbdotconf: add "client use krb5 netlogon" option

2025-01-13T23:40:30+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jennifer Sutton

param: Add "client netlogon ping protocol"

2024-11-11T14:03:04+00:00

Allow "net ads join" in environments where UDP/389 is blocked. Code
will follow.

Signed-off-by: Volker Lendecke 
Reviewed-by: Stefan Metzmacher

smbdotconf: add client ldap sasl wrapping = {starttls,ldaps}

2024-04-23T23:50:34+00:00

In order to use SASL authentitation within a TLS connection
we now provide "client ldap sasl wrapping = starttls" or
"client ldap sasl wrapping = ldaps".

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:ldap_server: add support for tls channel bindings

2024-04-23T23:50:34+00:00

ldap server require strong auth = allow_sasl_over_tls
is now an alias for 'allow_sasl_without_tls_channel_bindings'
and should be avoided and changed to 'yes' or
'allow_sasl_without_tls_channel_bindings'.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

docs-xml: Add new parameter "acl claims evaluation"

2023-09-26T23:45:35+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

docs-xml/smbdotconf: also allow 2012[_R2] for 'ad dc functional level'

2023-06-21T19:08:37+00:00

We may not jump to 2016 directly...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

param: Add new parameter "ad dc functional level"

2023-05-16T23:29:32+00:00

This allows the new unsupported functional levels to be unlocked, but with an smb.conf
option that is easily seen.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Joseph Sutton