samba.git/source3/param, branch talloc-2.3.2

s3:param:service - ensure registry shares loaded before home check

2020-10-22T00:30:38+00:00

Registry shares should be loaded and checked prior to checking home
directories. This ensures that an explicitly defined service takes
priority over home directories (same behavior as non-registry shares).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14543

Signed-off-by: Andrew Walker 
Reviewed-by: Jeremy Alison 
Reviewed-by: Gary Lockyer 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Thu Oct 22 00:30:38 UTC 2020 on sn-devel-184

s3:include: Move loadparm prototypes to own header file

2020-10-09T19:16:46+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Jeremy Allison

s3: safe_string: do not include string_wrappers.h

2020-08-28T00:56:34+00:00

Rather than have safe_string.h #include string_wrappers.h, make users of
string_wrappers.h include it explicitly.

includes.h now no longer includes string_wrappers.h transitively. Still
allow includes.h to #include safe_string.h for now so that as many
modules as possible get the safety checks in it.

Signed-off-by: Matthew DeVore 
Reviewed-by: David Mulder 
Reviewed-by: Jeremy Allison

docs-xml: Add 'client smb encrypt'

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s3:smbd: Use 'enum smb_encryption_setting' values

2020-08-19T16:22:40+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

param: Add 'server smb encrypt' parameter

2020-08-19T16:22:40+00:00

And this also makes 'smb encrypt' a synonym of that.

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

Remove depracated "ldap ssl ads" smb.conf option

2020-08-11T10:53:05+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14462

Signed-off-by: Isaac Boukris 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Isaac Boukris 
Autobuild-Date(master): Tue Aug 11 10:53:05 UTC 2020 on sn-devel-184

s3: Parameters. Add 'async dns timeout' parameter. Default to 10. Minimum value 1.

2020-08-07T06:34:37+00:00

Signed-off-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

tls: Use NORMAL:-VERS-SSL3.0 as the default configuration

2020-07-01T14:56:33+00:00

This seems to be really broken in GnuTLS and the documentation is also
not correct.

This partially reverts 53e3a959b958a3b099df6ecc5f6e294e96bd948e

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Jul  1 14:56:33 UTC 2020 on sn-devel-184

s3:lib:tls: Use better priority lists for modern GnuTLS

2020-06-17T17:42:02+00:00

We should use the default priority list. That is a good practice,
because TLS protocol hardening and phasing out of legacy algorithms,
is easier to co-ordinate when happens at a single place. See crypto
policies of Fedora.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14408

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Wed Jun 17 17:42:02 UTC 2020 on sn-devel-184