samba.git/python, branch v4-7-stable

CVE-2018-14629 dns: CNAME loop prevention using counter

2018-11-26T08:38:10+00:00

Count number of answers generated by internal DNS query routine and stop at
20 to match Microsoft's loop prevention mechanism.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13600

Signed-off-by: Aaron Haslett 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam

samba-tool: add virtualKerberosSalt attribute to 'user getpassword/syncpasswords'

2018-09-05T11:35:30+00:00

This might be useful for someone, but at least it's very useful for
tests.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13539

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 
(cherry picked from commit 39c281a23673691bab621de1a632d64df2c1c102)

dns wildcards: tests to confirm BUG 13536

2018-07-28T04:16:15+00:00

DNS wildcard matching failing if more than one label to the left of the
wildcard. This commits adds tests to confirm the bug.

Wildcard entry: *.example.org
bar.example.com matches
foo.bar.example.com does not, but it it should.

Signed-off-by: Gary Lockyer 
Reviewed-by: Jeremy Allison 
(cherry picked from commit 0d3aec18679a2637430263a55de5e210a9201e21)

samba-tool trust: support discovery via netr_GetDcName

2018-07-28T04:16:15+00:00

In case a remote DC does not support netr_DsRGetDCNameEx2(),
use netr_GetDcName() instead.

This should help with FreeIPA where embedded smbd runs as a domain
controller but does not implement full Active Directory compatibility.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13538

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Tue Jul 24 09:55:23 CEST 2018 on sn-devel-144

(cherry picked from commit c390728819e73cefbf02e0d52d22805930f4c45b)

python/tests: use explicit "client ipc max protocol = NT1" for samba.tests.net_join_no_spnego

2018-07-28T04:16:15+00:00

The tests rely on SMB1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13308

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy 
(cherry picked from commit 802e43bf742e756896fa73fcd139feca9ae293dd)

tests/auth_log: Permit SMB2 service description if empty binding is used for kerberos authentication

2018-07-28T04:16:14+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13308

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Stefan Metzmacher 
(cherry picked from commit 70a9cf9ccfc4075cc08209191db1bce2c9b432fc)

tests:dcerpc/raw_protocol: reproduce call_id truncation bug

2018-04-25T06:49:13+00:00

We need to make sure the server handles call_id values > UINT16_MAX.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13289

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme 
(cherry picked from commit 65e8edb382fbc7450919aad8b42cfcae9e779d11)

tests/py_creds: Add a SamLogonEx test with an empty string domain

2018-03-20T16:13:08+00:00

This test passes against 4.6, but failed against 4.7.5 and master.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13206

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher 
(cherry picked from commit 5c625eae3f54e8de434de26e9f6a0f2fde557c18)

subnet: Avoid a segfault when renaming subnet objects

2018-02-20T16:48:35+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13031

Signed-off-by: Garming Sam 
Reviewed-by: Douglas Bagnall 

Autobuild-User(v4-7-test): Karolin Seeger 
Autobuild-Date(v4-7-test): Tue Feb 20 17:48:35 CET 2018 on sn-devel-144

dbcheck: skip find_missing_forward_links_from_backlinks() if the db has the sortedLinks feature

2018-02-06T15:41:09+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13228

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Mon Feb  5 18:32:51 CET 2018 on sn-devel-144

(cherry picked from commit 0c3348feb09f4f0ba85455b8c3ff5c5fa60d139b)

Autobuild-User(v4-7-test): Karolin Seeger 
Autobuild-Date(v4-7-test): Tue Feb  6 16:41:09 CET 2018 on sn-devel-144