samba.git/source4/dsdb/wscript_build, branch master

libcli/security: split trust_forest_info_* functions into samba-security-trusts

2025-04-03T09:36:31+00:00

This will avoid dependency loops in following commits.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

s4:dsdb: add forest trust scanner service

2025-02-22T16:00:36+00:00

See MS-ADTS 3.1.1.6.4 PDC Forest Trust Update

It basically connects to all forest trusts
and searches for crossRef objects with
SYSTEM_FLAG_CR_NTDS_DOMAIN under
CN=Partitions,CN=Configuration.

With this information it add/removes
FOREST_TRUST_SCANNER_INFO records into
the msDS-TrustForestTrustInfo of the local
trustedDomain object.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

s4:dsdb: Add functions for Group Managed Service Accounts implementation

2024-04-16T03:58:31+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:dsdb: Add functions for GKDI root key creation

2024-03-01T00:19:45+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:dsdb: Make sids_contains_sid() usable by other Samba modules

2023-11-01T20:10:45+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:dsdb: let dsdb_check_and_update_fl() also operatingSystem[Version]

2023-07-19T03:31:30+00:00

Some clients (e.g. an exchange server) check operatingSystemVersion
in order to check if a domain controller is new enough.

So we better use a value matching the dc functional level.

While we also fixed operatingSystem[Version] at provision time,
we do it also in dsdb_check_and_update_fl() in order to
handle old provisions and systems joined to an existing domain.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

CVE-2020-25718 dsdb: Bring sid_helper.c into common code as rodc_helper.c

2021-11-09T19:45:34+00:00

These common routines will assist the KDC to do the same access
checking as the RPC servers need to do regarding which accounts
a RODC can act with regard to.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558

Signed-off-by: Andrew Bartlett 
Reviewed-by: Joseph Sutton

samba-tool: Enable pydsdb without ad dc

2021-03-10T21:43:34+00:00

Signed-off-by: David Mulder 
Reviewed-by: Andrew Bartlett

build: Remove bld.gen_python_environments()

2019-03-21T04:06:14+00:00

This was part of --extra-python support.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam

s4-dsdb: only build dsdb Python modules for AD DC

2018-07-23T14:24:10+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13542

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Jeremy Allison 
Reviewed-by: Guenther Deschner