samba.git/source4/libcli/ldap, branch talloc-2.3.1

s4/libcli/ldab: clang: Fix 'Access results in a deref of a null pointer'

2019-07-16T22:52:24+00:00

Fixes:

source4/libcli/ldap/ldap_client.c:1023:6: warning: Access to field 'type' results in a dereference of a null pointer <--[clang]
        if ((*msg)->type != type) {
            ^~~~~~~~~~~~

Signed-off-by: Noel Power 
Reviewed-by: Gary Lockyer

libcli/ldap: Remove unsued ldap_transaction()

2019-05-22T05:59:14+00:00

This is unsued since a87dea2a0894015cf4a3140995791f5468c40038 in 2007
when we moved to using LDB for LDAP in this area of the code.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

samdb: Add transaction id control

2018-05-10T18:02:23+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

CVE-2018-1057: s4:dsdb/samdb: define DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID control

2018-03-13T09:24:27+00:00

Will be used to pass "user password change" vs "password reset" from the
ACL to the password_hash module, ensuring both modules treat the request
identical.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13272

Signed-off-by: Ralph Boehme 
Reviewed-by: Stefan Metzmacher

libsocket: Add "mem_ctx" to socket_create()

2018-02-27T08:14:17+00:00

Every caller did a talloc_steal() after socket_create(). Just pass in the
correct memory context.

Signed-off-by: Volker Lendecke 
Reviewed-by: Andreas Schneider

util/rfc1738_unescape(): return end pointer or NULL on error

2018-02-22T00:04:18+00:00

At present we don't detect errors, but when we do we'll return NULL.

Signed-off-by: Douglas Bagnall 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: just use gensec_update() in ldap_bind_sasl()

2017-05-21T23:12:23+00:00

We're in a blocking/sync call, we should avoid using nested event loops for
this. As far as I can see ldap_bind_sasl() is only called from command line
tools, which are ok to block.

Resolving this requires also resolving the general case in LDB, as that is the
API this is used from.  We would need ldb_connect_send() and ldb_connect_recv()
at a start.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Mon May 22 01:12:23 CEST 2017 on sn-devel-144

typo: mplementation => implementation

2016-05-06T03:03:16+00:00

Signed-off-by: Garming Sam 
Reviewed-by: Douglas Bagnall

CVE-2016-2113: s4:libcli/ldap: verify the server certificate and hostname if configured

2016-04-12T17:25:25+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Günther Deschner

CVE-2016-2113: s4:lib/tls: implement infrastructure to do peer verification

2016-04-12T17:25:25+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11752

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Günther Deschner