samba.git/libds/common, branch talloc-2.3.4

CVE-2020-25717: Add FreeIPA domain controller role

2021-11-09T19:45:33+00:00

As we want to reduce use of 'classic domain controller' role but FreeIPA
relies on it internally, add a separate role to mark FreeIPA domain
controller role.

It means that role won't result in ROLE_STANDALONE.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

pydsdb: Add API to return strings of known UF_ flags

2021-09-02T05:03:31+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

libds: rename UF_MACHINE_ACCOUNT_MASK to UF_TRUST_ACCOUNT_MASK

2018-03-13T17:59:17+00:00

The name UF_TRUST_ACCOUNT_MASK better reflects the use case and it's not
yet used.

Signed-off-by: Ralph Boehme 
Reviewed-by: Andrew Bartlett

flags.h: Introduce the 2016 function level constant

2017-12-14T07:20:14+00:00

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

Avoid including libds/common/roles.h in public loadparm.h header.

2016-01-13T03:43:23+00:00

Signed-Off-By: Jelmer Vernooij 
Reviewed-By: Andrew Bartlett 
Reviewed-By: Stefan Metzmacher

dsdb: Add functional levels for 2012 and 2012R2

2015-10-20T18:22:22+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison

dsdb-samldb: Only allow known and settable userAccountControl bits to be set

2015-01-22T06:50:06+00:00

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993

Signed-off-by: Andrew Bartlett 
Signed-off-by: Garming Sam 
Pair-programmed-with: Garming Sam 
Reviewed-by: Stefan Metzmacher

libds: UF_PARTIAL_SECRETS_ACCOUNT is a flag, not an account type

2015-01-22T06:50:06+00:00

This list should only be of the account exclusive account type bits.

Note, this corrects the behaviour in samldb modifies of
userAccountControl.

This reverts 6cb91a8f33516a33210a25e4019f3f3fbbfe61f2

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993

Pair-programmed-with: Garming Sam 
Signed-off-by: Andrew Bartlett 
Signed-off-by: Garming Sam 
Reviewed-by: Stefan Metzmacher

libds: add UF_PARTIAL_SECRETS_ACCOUNT to UF_ACCOUNT_TYPE_MASK

2014-04-02T15:12:47+00:00

Change-Id: Ie26520c37c393ab4d2e3c5782e3dca46d4d1f83c
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

lib/param: Create a seperate server role for "active directory domain controller"

2012-06-15T07:18:33+00:00

This will allow us to detect from the smb.conf if this is a Samba4 AD
DC which will allow smarter handling of (for example) accidentially
starting smbd rather than samba.

To cope with upgrades from existing Samba4 installs, 'domain
controller' is a synonym of 'active directory domain controller' and
new parameters 'classic primary domain controller' and 'classic backup
domain controller' are added.

Andrew Bartlett