samba.git/libcli/lsarpc, branch talloc-2.4.4

libcli/security: split trust_forest_info_* functions into samba-security-trusts

2025-04-03T09:36:31+00:00

This will avoid dependency loops in following commits.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: add trust_forest_info_match_tln_namespace()

2025-02-22T16:00:36+00:00

This will be used by the namespace filtering part of
sid filtering...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: let trust_forest_info_from_lsa2() handle BINARY and SCANNER records

2025-02-22T16:00:36+00:00

The tricky part is that we also need to upgrade
LSA_FOREST_TRUST_BINARY_DATA records into FOREST_TRUST_SCANNER_INFO records.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: add trust_forest_info_lsa_2to2()

2025-02-22T16:00:36+00:00

This normalizes LSA_FOREST_TRUST_BINARY_DATA in
LSA_FOREST_TRUST_SCANNER_INFO.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: let trust_forest_{record_lsa_2to1,info_to_lsa}() handle SCANNER_INFO

2025-02-22T16:00:36+00:00

We need to convert the [LSA_]FOREST_TRUST_SCANNER_INFO record
into a binary record, but with LSA_FOREST_TRUST_SCANNER_INFO
as type.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: let trust_forest_{record_lsa_1to2,info_from_lsa}() handle BINARY and SCANNER records

2025-02-22T16:00:36+00:00

The tricky part is that it's all based on the sub_type within
the binary data, if it's FOREST_TRUST_SCANNER_INFO the
record is upgraded to an LSA_FOREST_TRUST_SCANNER_INFO,
otherwise it's downgraded to a LSA_FOREST_TRUST_BINARY_DATA
record.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: let trust_forest_record_to_lsa() handle BINARY and SCANNER records

2025-02-22T16:00:36+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: let trust_forest_record_from_lsa() handle BINARY and SCANNER records

2025-02-22T16:00:36+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

s4:dsdb/util_trusts: convert most functions from lsa_ForestTrustInformation to lsa_ForestTrustInformation2

2025-02-22T16:00:36+00:00

We use trust_forest_info_lsa_{1to2,2to1}() where needed.

This will make it possible to support
FOREST_TRUST_BINARY_DATA and FOREST_TRUST_SCANNER_INFO later.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/lsarpc: add trust_forest_info_lsa_{1to2,2to1}()

2025-02-22T16:00:36+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme