samba.git/lib/param/param_table.c, branch talloc-2.4.2

docs-xml: Add new parameter "acl claims evaluation"

2023-09-26T23:45:35+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

docs-xml/smbdotconf: also allow 2012[_R2] for 'ad dc functional level'

2023-06-21T19:08:37+00:00

We may not jump to 2016 directly...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

param: Add new parameter "ad dc functional level"

2023-05-16T23:29:32+00:00

This allows the new unsupported functional levels to be unlocked, but with an smb.conf
option that is easily seen.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Joseph Sutton

lib/util: Add "debug syslog format = always", which logs to stdout in syslog style

2023-04-06T12:51:30+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16T20:38:32+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

dsdb: Allow password history and password changes without an NT hash

2022-06-26T22:10:29+00:00

We now allow this to be via the ENCTYPE_AES256_CTS_HMAC_SHA1_96 hash instead
which allows us to decouple Samba from the unsalted NT hash for
organisations that are willing to take this step (for user accounts).

(History checking is limited to the last three passwords only, as
ntPwdHistory is limited to NT hash values, and the PrimaryKerberosCtr4
package only stores three sets of keys.)

Since we don't store a salt per-key, but only a single salt, the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09T19:45:33+00:00

As we want to reduce use of 'classic domain controller' role but FreeIPA
relies on it internally, add a separate role to mark FreeIPA domain
controller role.

It means that role won't result in ROLE_STANDALONE.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

docs-xml: remove support for "SMB3_10"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

docs-xml: remove support for "SMB2_24"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

docs-xml: remove support for "SMB2_22"

2021-07-15T00:06:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison