samba.git/libcli, branch talloc-2.4.0 Unnamed repository; edit this file 'description' to name the repository. lib: Remove idtree from samba_util.h 2023-01-10T00:28:37+00:00 Volker Lendecke vl@samba.org 2023-01-05T09:04:23+00:00 b73ecb28a7ac5996e1a8c455d15f41f59d9d8765 No need to recompile the world when only a few files need this. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
No need to recompile the world when only a few files need this.

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
lib: Add "starting_id" to idr_get_new_random() 2023-01-10T00:28:37+00:00 Volker Lendecke vl@samba.org 2023-01-04T10:43:59+00:00 43f041de6567bcb40a8e4564fce66ee08af6cc0b To be used in smbXsrv_open.c, for this we need a lower bound. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
To be used in smbXsrv_open.c, for this we need a lower bound.

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
libcldap: Save lines in cldap_netlogon_create_filter() with talloc_asprintf_addbuf() 2022-12-14T04:32:34+00:00 Volker Lendecke vl@samba.org 2022-11-29T09:46:42+00:00 6b6f8debb5dedf1520a7bedfa0277849f70683dd Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
CVE-2022-37966 libcli/auth: let netlogon_creds_cli_warn_options() about "kerberos encryption types=legacy" 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-12-05T20:45:08+00:00 0248907e34945153ff2be62dc11d75c956a05932 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-24T17:22:23+00:00 1c6c1129905d0c7a60018e7bf0f17a0fd198a584 AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no reason to allow md5 servers by default. Note the change in netlogon_creds_cli_context_global() is only cosmetic, but avoids confusion while reading the code. Check with: git show -U35 libcli/auth/netlogon_creds_cli.c BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 libcli/auth: add/use netlogon_creds_cli_warn_options() 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-30T13:47:33+00:00 7e7adf86e59e8a673fbe87de46cef0d62221e800 This warns the admin about insecure options BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
This warns the admin about insecure options

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 libcli/auth: pass lp_ctx to netlogon_creds_cli_set_global_db() 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-30T13:46:59+00:00 992f39a2c8a58301ceeb965f401e29cd64c5a209 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
lib: Add symlink trust flags from dochelp 2022-12-05T15:06:32+00:00 Volker Lendecke vl@samba.org 2022-12-02T09:06:31+00:00 7239d756290292f5056ea0235630e8413ef5960f Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: David Mulder <dmulder@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: David Mulder <dmulder@samba.org>
s3: smbd: Add SMB2_FILE_POSIX_INFORMATION getinfo info level (100 on the wire). 2022-11-29T10:26:37+00:00 Jeremy Allison jra@samba.org 2017-12-14T23:18:21+00:00 72004f8f94824e00ed120d87893ec57c96c5f8f2 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> 
Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
libcli: Add python wappers to reparse_symlink.c 2022-11-22T18:27:33+00:00 Volker Lendecke vl@samba.org 2022-11-03T11:26:34+00:00 7f63e98b95b8a9b6c02762618ee0f4be30cafa79 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>