samba.git/lib/param/param_table.c, branch talloc-2.2.0

Add mdns name configuration option

2017-12-08T21:58:17+00:00

Add the mdns name configuration variable to control the mdns hostname.
The default is to use the NETBIOS name of the system to match previous
versions which is typically the hostname in all capitals. A value of mdns
can be provided to defer the hostname to the mdns library.

With the recent patch to support time machine being merged this patch
allows for a user to configure the server name that is advertised to
be lower cased through Avahi advertisements.

Signed-off-by: Kevin Anderson 
Reviewed-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

param: Add new "disabled" value to "ntlm auth" to disable NTLM totally

2017-07-04T04:57:20+00:00

Signed-off-by: Andrew Bartlett 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
Reviewed-by: Garming Sam

auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm auth ='

2017-07-04T04:57:20+00:00

The ntlm auth parameter is expanded to more clearly describe the
role of each option, and to allow the new mode that permits MSCHAPv2
(as declared by the client over the NETLOGON protocol) while
still banning NTLMv1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252
Signed-off-by: Andrew Bartlett 

Based on a patch by Mantas Mikulėnas :

Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth")
added the --allow-mschapv2 option, but didn't implement checking for it
server-side. This implements such checking.

Additionally, Samba now disables NTLMv1 authentication by default for
security reasons. To avoid having to re-enable it globally, 'ntlm auth'
becomes an enum and a new setting is added to allow only MSCHAPv2.

Signed-off-by: Mantas Mikulėnas 
Reviewed-by: Garming Sam

param: Allow to specify kerberos method on the commandline

2017-03-14T14:22:12+00:00

We support --option for our tools but you cannot set an option where the
value of the option includes a space.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlet

s3/smbd: new "mangled names" setting "illegal"

2017-01-09T18:31:20+00:00

This does mangling for names with illegal NTFS characters, but not for
names longer then 8.3:

Name mangling with mangled named = yes
======================================

Mangled | Short | Name
----------------------------
        |       | foo
        | yes   | 123456789
yes     |       | foo:bar

Name mangling with mangled named = illegal
==========================================

Mangled | Short | Name
----------------------------
        |       | foo
        |       | 123456789
yes     |       | foo:bar

Setting "mangled names = illegal" is the most sensible setting for
modern clients that don't use the shortname anymore.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

s3/smbd: convert "mangled names" option to an enum

2017-01-09T18:31:20+00:00

This is in preparation of adding an additional setting for this
option. No change in behaviour by this commit, that comes in the next
one.

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison

smbd: add an option to inherit only the UNIX owner

2016-08-10T06:18:17+00:00

This can be used to emulate folder quotas, as explained in the
modified manpage.

Signed-off-by: Uri Simchoni 
Reviewed-by: Jeremy Allison

s3-param: add kerberos encryption types parameter

2016-08-09T02:39:07+00:00

Signed-off-by: Uri Simchoni 
Reviewed-by: Jeremy Allison

CVE-2016-2113: docs-xml: add "tls verify peer" option defaulting to "no_check"

2016-04-12T17:25:25+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Günther Deschner

CVE-2016-2112: docs-xml: add "ldap server require strong auth" option

2016-04-12T17:25:25+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Günther Deschner