samba.git/python/samba/netcmd, branch talloc-2.4.0

samba-tool domain: fix a typo in samba-tool passwordsettings option description

2023-01-17T17:21:38+00:00

Signed-off-by: Björn Baumbach 
Reviewed-by: Ralph Boehme

CVE-2022-37966 samba-tool: add 'domain trust modify' command

2022-12-13T13:07:30+00:00

For now it only allows the admin to modify
the msDS-SupportedEncryptionTypes values.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme 
Reviewed-by: Joseph Sutton

CVE-2022-37966 samba-tool: Declare explicitly RC4 support of trust objects

2022-12-13T13:07:29+00:00

As we will assume, as part of the fixes for CVE-2022-37966, that trust
objects with no msDS-SupportedEncryptionTypes attribute support AES
keys, RC4 support must now be explicitly indicated.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

CVE-2022-37966 samba-tool: Fix 'domain trust create' documentation

2022-12-13T13:07:29+00:00

This option does the opposite of what the documentation claims.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

gp: PAM Access should implicitly deny ALL w/ allow

2022-11-21T21:01:31+00:00

If an allow entry is specified, the PAM Access
CSE should implicitly deny ALL (everyone other
than the explicit allow entries).

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison

gp: samba-tool manage gpo access add don't fail w/out upn

2022-11-21T21:01:31+00:00

The search response for the user could possibly
not include a upn (this happens with Administrator
for example).

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison

gp: Make samba-tool gpo manage sudoers remove backward compatible

2022-11-21T21:01:30+00:00

Ensure `samba-tool gpo manage sudoers remove` is
backward compatible with the GPME sudo rules.

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison

gp: Make samba-tool gpo manage sudoers list backward compatible

2022-11-21T21:01:30+00:00

Ensure `samba-tool gpo manage sudoers list` is
backward compatible with the GPME sudo rules.

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison

gp: Fix startup scripts add not always set runonce

2022-11-15T02:09:45+00:00

The runonce is always being set because neither
True nor False is ever None.

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Nov 15 02:09:45 UTC 2022 on sn-devel-184

gp: Fix startup scripts list not fail with empty args

2022-11-15T01:08:38+00:00

This fixes the startup scripts list command to
not fail when the parameters variable is empty.

Signed-off-by: David Mulder 
Reviewed-by: Jeremy Allison