samba.git/source4/ldap_server, branch master

s4:lib/tls: let tstream_tls_params_server_lpcfg() use lpcfg_dns_hostname() internally

2025-08-26T20:58:37+00:00

This is simpler and the next step will also make use of
lpcfg_additional_dns_hostnames() too...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15899

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

s4:ldap_server: make use of tstream_tls_params_server_lpcfg()

2025-04-18T10:17:30+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Volker Lendecke

s4/ldap server: avoid NULL deref if search control has no data

2025-03-12T03:38:34+00:00

We switch to ldb_request_replace_control() so that the old search
control is removed in the NULL data case.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Volker Lendecke

ldap_server: Add a ldapsrv debug class to log LDAP queries

2024-07-09T08:37:22+00:00

Patch updated for recent samba versions in merge request #3295 by kvvloten
Initial patch created by Jeremy Allison (https://www.spinics.net/lists/samba/msg161128.html) to log LDAP server queries/functions in a separate file

Signed-off-by: Andréas Leroux 
Reviewed-by: Andreas Schneider 
Reviewed-by: Jo Sutton 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Tue Jul  9 08:37:22 UTC 2024 on atb-devel-224

dsdb: Make argument order of dsdb_update_gmsa_{entry_,}keys() consistant with other uses

2024-06-10T04:27:30+00:00

Other functions in this file are TALLOC_CTX, struct ldb_context *, not
the other way around.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

s4:ldap_server: remove unused include of gensec_internal.h

2024-04-23T23:50:34+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:ldap_server: add support for tls channel bindings

2024-04-23T23:50:34+00:00

ldap server require strong auth = allow_sasl_over_tls
is now an alias for 'allow_sasl_without_tls_channel_bindings'
and should be avoided and changed to 'yes' or
'allow_sasl_without_tls_channel_bindings'.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:ldap_server: Update gMSA keys when DSDB_CONTROL_GMSA_UPDATE_OID control is specified

2024-04-21T22:10:36+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:ldap_server: Consider ldapi connections to be encrypted

2024-04-16T03:58:31+00:00

Modifications to unicodePwd require an encrypted connection. This change
allows unicodePwd to be modified over an ldapi connection.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15634

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:ldap_server: Store whether an LDAP connection is over ldapi

2024-04-16T03:58:31+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15634

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett