samba.git/source4/auth, branch talloc-2.2.0

build: Remove bld.gen_python_environments()

2019-03-21T04:06:14+00:00

This was part of --extra-python support.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam

build: Remove --extra-python

2019-03-21T04:06:14+00:00

This option is quite invasive in waf and was mainly for the python3 transition.

Testing with multiple python versions can be done by testing a full compile against
multiple versions, likewise multiple different binding versions can be created
the same way.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

sam.c: allocate account_sid on tmp_ctx

2019-03-06T04:30:22+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Mar  6 04:30:22 UTC 2019 on sn-devel-144

sam.c: fix incorrect check of talloc_new() allocation

2019-03-06T03:16:15+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam

s4/auth/krb: fix spelling of entries

2019-03-04T21:41:17+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

winbind: Generate and pass logon ID

2019-02-20T05:03:09+00:00

Generate a random logon_id and pass it in the SamLogon calls.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

librpc idl: netlogon netr_identity_info logon_id to 64 bit

2019-02-20T05:03:09+00:00

Fold the two 32 bit values logon_id_high and logon_id_low into a single
64 bit logon_id in netr_identity_info.  This will be used to tie
together winbind and SamLogon requests in audit logging.

Summary of the of the Query and Response from Microsoft on it's usage.

[REG:119013019612095] [MS-NRPC]: NETLOGON_LOGON_IDENTITY_INFO: Does
the Reserved field have LogonId meaning?

Questions:
  In NetrLogonSamLogonEx does the Reserved field
  (of NETLOGON_LOGON_IDENTITY_INFO) have LogonId meaning?

  What is a valid LogonID, and does have any audit usage?

  Samba is sending a constant "deadbeef" in hex and would like to
  understand any usage of this field.

Response:
  The NRPC spec is accurate in defining the field as Reserved, and without
  protocol significance. In the header file in our source code, it is
  defined as LogonId and commented as such, but it’s effectively not used.
  This is probably why the API structure has that field name. It may have
  been intended as such but it’s not used.

Samba will send a random value in this field.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

Fix mem leak with PyBytes_FromStringAndSize

2019-02-13T10:42:08+00:00

Reviewed-by: Andrew Bartlett abartlet@samba.org

s4/pyauth: fix memory leak when context_new() has bad arguments

2019-02-01T02:36:17+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

s4/pyauth: insist on proper ldb in context_new()

2019-02-01T02:36:17+00:00

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett