samba.git/source4/dsdb/tests/python, branch talloc-2.3.1

CVE-2019-14847 dsdb: Demonstrate the correct interaction of ranged_results style attributes and dirsync

2019-10-31T22:07:40+00:00

Incremental results are provided by a flag on the dirsync control, not
by changing the attribute name.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14040

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

s4:tests/dirsync: add tests for dirsync with extended_dn

2019-10-24T09:46:28+00:00

This demonstrates a problems that the extended_dn returned
by the dirsync module always uses the SDDL format for GUID/SID
components.

Azure AD connect reports discovery errors:
  reference-value-not-ldap-conformant
for attributes member and manager.
The key is that it sends the LDAP_SERVER_EXTENDED_DN_OID without
an ExtendedDNRequestValue blob, which means the flag value should
be treated as 0 and the HEX string format should be used.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14153

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

librpc/idl: change from samr_GroupAttrs in samr.idl to security_GroupAttrs in security.idl

2019-09-20T01:14:42+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Guenther Deschner

Spelling fixes s/recieved/received/

2019-09-01T22:21:27+00:00

Signed-off-by: Mathieu Parent 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

paged results: tests without server_sort ctrl

2019-08-30T08:26:21+00:00

On windows, adding or modifying a record during a paged results search
behaves differently depending on whether or not you supply server_sort
control.  This patch adds tests and documentation.

Signed-off-by: Aaron Haslett 
Reviewed-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Fri Aug 30 08:26:21 UTC 2019 on sn-devel-184

s4/tests/dsdb_schema: not usefully executable as script

2019-07-02T04:21:36+00:00

You could run the script, but it wouldn't do anything.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

CVE-2019-12436 dsdb/paged_results: ignore successful results without messages

2019-06-19T08:16:39+00:00

So that we don't dereference result->msgs[0] when it doesn't exist.
This can happen when the object has changed in such a way that it no
longer matches the original search query.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13951

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Karolin Seeger 
Autobuild-Date(master): Wed Jun 19 08:16:39 UTC 2019 on sn-devel-184

selftest: Remove gensec.FEATURE_SEAL from samba4.ldap.notification

2019-05-20T04:01:11+00:00

This made it much harder to watch under wireshark and is not required (no password setting).

Signed-off-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

dsdb: Add random values to names in tests for large LDAP responses

2019-05-20T04:01:10+00:00

This test is run agianst multiple DCs in the same domain, so there can
be a race with replication.  Therefore avoid using the same name twice
by adding a random suffix.

This is an improvement to a demonstrator for this bug in TDB:
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13952

Signed-off-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

dsdb: Add tests for large LDAP responses

2019-05-17T06:48:10+00:00

This behaviour is Samba-specific, we have not traditionally cut of responses at 1000
or so as Windows does, and we need to change that behaviour carefully.

This triggers this bug in TDB:
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13952

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison