samba.git/source4/ldap_server, branch talloc-2.3.4

ldap_server: Fix typos

2022-04-26T21:41:29+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts

2021-11-25T02:30:42+00:00

This puts all the detail on one line so it can be searched
by IP address and connecting SID.

This relies on the anr handling as otherwise this log
becomes the expanded query, not the original one.

RN: Provide clear logs of the LDAP search and who made it, including
a warning (at log level 3) for queries that are 1/4 of the hard timeout.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14694

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall 

Autobuild-User(master): Douglas Bagnall 
Autobuild-Date(master): Thu Nov 25 02:30:42 UTC 2021 on sn-devel-184

CVE-2021-3670 ldap_server: Remove duplicate print of LDAP search details

2021-11-25T01:41:30+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14694

Signed-off-by: Andrew Bartlett 
Reviewed-by: Douglas Bagnall

CVE-2021-3670 ldap_server: Ensure value of MaxQueryDuration is greater than zero

2021-11-25T01:41:30+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14694

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

CVE-2021-3670 ldap_server: Set timeout on requests based on MaxQueryDuration

2021-11-25T01:41:30+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14694

Signed-off-by: Joseph Sutton 
Reviewed-by: Douglas Bagnall

s4:ldap_server: Use cli_credentials_init_server()

2021-04-09T10:46:28+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s4: rename source4/smbd/ to source4/samba/

2020-11-27T10:07:18+00:00

Signed-off-by: Ralph Boehme 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Ralph Böhme 
Autobuild-Date(master): Fri Nov 27 10:07:18 UTC 2020 on sn-devel-184

s4:ldap_server: Use samba_server_gensec_start() in ldapsrv_backend_Init()

2020-09-07T12:02:15+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

lib/util: remove extra safe_string.h file

2020-08-28T02:18:40+00:00

lib/util/safe_string.h is similar to source3/include/safe_string.h, but
the former has fewer checks. It is missing bcopy, strcasecmp, and
strncasecmp.

Add the missing elements to lib/util/safe_string.h remove the other
safe_string.h which is in the source3-specific path. To accomodate
existing uses of str(n?)casecmp, add #undef lines to source files where
they are used.

Signed-off-by: Matthew DeVore 
Reviewed-by: David Mulder 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Aug 28 02:18:40 UTC 2020 on sn-devel-184

ldap_server: Terminate LDAP connections on krb ticket expiry

2020-08-21T19:14:32+00:00

See RFC4511 section 4.4.1 and

https://lists.samba.org/archive/cifs-protocol/2020-August/003515.html

for details: Windows terminates LDAP connections when the krb5 ticket
expires, Samba should do the same. This patch slightly deviates from
Windows behaviour by sending a LDAP exop response with msgid 0 that is
ASN1-encoded conforming to RFC4511.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=14465

Signed-off-by: Volker Lendecke 
Reviewed-by: Stefan Metzmacher