samba.git/lib/param/param_table.c, branch talloc-2.4.0

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16T20:38:32+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

dsdb: Allow password history and password changes without an NT hash

2022-06-26T22:10:29+00:00

We now allow this to be via the ENCTYPE_AES256_CTS_HMAC_SHA1_96 hash instead
which allows us to decouple Samba from the unsalted NT hash for
organisations that are willing to take this step (for user accounts).

(History checking is limited to the last three passwords only, as
ntPwdHistory is limited to NT hash values, and the PrimaryKerberosCtr4
package only stores three sets of keys.)

Since we don't store a salt per-key, but only a single salt, the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09T19:45:33+00:00

As we want to reduce use of 'classic domain controller' role but FreeIPA
relies on it internally, add a separate role to mark FreeIPA domain
controller role.

It means that role won't result in ROLE_STANDALONE.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

docs-xml: remove support for "SMB3_10"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

docs-xml: remove support for "SMB2_24"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

docs-xml: remove support for "SMB2_22"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

lib:param: Add 'client protection' config option

2021-04-28T03:43:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib:param: Add 'client use kerberos' config parameter

2021-04-28T03:43:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

param: Create and use enum_smb_encryption_vals

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

Detect when command line max protocol < min protocol

2019-11-12T17:52:28+00:00

Due to the increased default minimum protocol
level to SMB2, some users notice that
specifying smbclient -m NT1 fails with
NT_STATUS_CONNECTION_DISCONNECTED, with no SMB
traffic on the wire. Report when the max protocol
is set less than the min protocol.

Signed-off-by: David Mulder 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Noel Power 

Autobuild-User(master): Noel Power 
Autobuild-Date(master): Tue Nov 12 17:52:28 UTC 2019 on sn-devel-184