samba.git/source4/libcli/ldap, branch talloc-2.4.2

util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n()

2023-11-15T22:07:36+00:00

The new name indicates that — contrary to functions such as strnlen() —
the length may include the terminator.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli: Remove trailing whitespace

2023-11-15T22:07:36+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli: Check return value of convert_string_talloc() (CID 1272839)

2023-10-13T02:18:31+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli: Remove unnecessary casts

2023-10-13T02:18:31+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli: Fix code spelling

2023-08-14T21:45:29+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: Fix code spelling

2023-08-08T04:39:37+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

s3-librpc: add ads.idl and convert ads_struct to talloc.

2022-12-16T20:38:32+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

CVE-2020-25720: s4-acl: Change behavior of Create Children check

2022-09-16T02:32:36+00:00

Up to now, the rights to modify an attribute were not checked during an LDAP
add operation. This means that even if a user has no right to modify
an attribute, they can still specify any value during object creation,
and the validated writes were not checked.
This patch changes this behavior. During an add operation,
a security descriptor is created that does not include the one provided by the
user, and is used to verify that the user has the right to modify the supplied attributes.
Exception is made for an object's mandatory attributes, and if the user has Write DACL right,
further checks are skipped.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14810

Pair-Programmed-With: Joseph Sutton 

Signed-off-by: Nadezhda Ivanova 
Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

dsdb: Return dsdb_password_change control name to DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID

2022-03-17T01:57:38+00:00

This makes it clearer that the purpose of this control is to indicate that the password
was already checked (by an out-of-band mechanism, eg kpasswd) and so can safely be changed
subject to ACLs etc.

This essentially reverts bbb9dc806e4399c65dee9b5dc2cde0bfaa9609bd

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

auth:creds: Add obtained arg to cli_credentials_set_gensec_features()

2021-04-28T03:43:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett