samba.git/selftest, branch talloc-2.1.14

selftest: Add tests for samba.auth.admin_session()

2018-07-12T02:32:05+00:00

Signed-off-by: Andrew Bartlett 
Signed-off-by: Joe Guo 
Pair-programmed-with: Joe Guo 
Reviewed-by: Douglas Bagnall

dns: static records

2018-07-12T02:31:56+00:00

Modifies bind9 and internal dns to match windows static records behaviour.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dns: update tool changed for scavenging

2018-07-12T02:31:55+00:00

Now that scavenging is implemented, the DNS update tool needs to be changed so
that it always updates every name required by the DC.  Otherwise, the records
might be scavenged.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dns+kcc: adding dns scavenging to kcc periodic run

2018-07-12T02:31:55+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Pair-Programmed-With: Gary Lockyer 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dns: dns record scavenging function (without task)

2018-07-12T02:31:55+00:00

DNS record scavenging function with testing.  The logic of the custom match rule
in previous commit is inverted so that calculations using zone properties can
be taken out of the function's inner loop. Periodic task to come.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dns: custom match rule for DNS records to be tombstoned

2018-07-12T02:31:54+00:00

A custom match rule for records to be tombstoned by the scavenging process.
Needed because DNS records are a multi-valued attribute on name records, so
without a custom match rule we'd have entire zones into memory to search for
expired records.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Signed-off-by: Andrew Bartlett

dns: server side implementation of record aging

2018-07-12T02:31:54+00:00

Code for retrieving aging properties from a zone and using them for timestamp
setting logic during processing of DNS requests.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

rpc dns: reset dword aging related zone properties

2018-07-12T02:31:53+00:00

This allows a user to set zone properties relevant to DNS record aging over RPC.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

dns: record aging tests

2018-07-12T02:31:52+00:00

First basic DNS record aging tests.  These check that we can
turn aging on and off, and that timestamps are written on DNS
add and update calls, but not RPC calls.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10812

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

s3:messages: make the loop in msg_dgm_ref_recv() more robust against stale pointers

2018-07-10T18:31:13+00:00

The interaction between msg_dgm_ref_recv() and msg_dgm_ref_destructor()
doesn't allow two references from messaging_dgm_ref() to be free'd
during the loop in msg_dgm_ref_recv().

In addition to the global 'refs' list, we also need to
have a global 'next_ref' pointer, which can be adjusted in
msg_dgm_ref_destructor().

As AD DC we hit this when using irpc in auth_winbind,
which uses imessaging_client_init().
In addition to the main messaging_dgm_ref() in smbd,
source3/auth/auth_samba4.c: prepare_gensec() and
make_auth4_context_s4() also generate a temporary
imessaging_context for auth_context->msg_ctx from within
auth_generic_prepare().

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13514

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison