samba.git/source4/libcli/ldap, branch talloc-2.4.4

dsdb: Prepare to handle smartcard password rollover

2024-06-10T04:27:30+00:00

We do this by allowing the password change control to indicate
that the password is to be randomised, bypassing the quality
checks (as true random passwords often fail these) and
re-randomising with the same code as is used for the KDC.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jo Sutton

s4:libcli: Add more controls to our list of known controls

2024-05-16T02:11:36+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli: Fix code spelling

2024-05-16T02:11:36+00:00

Signed-off-by: Jo Sutton 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: add support for ADS_AUTH_SASL_{STARTTLS,LDAPS}

2024-04-23T23:50:34+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: add tls channel binding support for ldap_bind_sasl()

2024-04-23T23:50:34+00:00

We still allow 'ldap_testing:tls_channel_bindings = no' and
'ldap_testing:channel_bound = no' for testing
the old behavior in order to have expected failures in our tests.

And we have 'ldap_testing:forced_channel_binding = somestring'
in order to force invalid bindings.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: make use of tstream_tls_params_client_lpcfg()

2024-04-23T23:50:33+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: force GSS-SPNEGO in ldap_bind_sasl()

2024-04-23T23:50:33+00:00

There's no point in asking the server for supportedSASLMechanisms,
every server (we care about) supports GSS-SPNEGO.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: fix no memory error code in ldap_bind_sasl()

2024-04-23T23:50:33+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:libcli/ldap: ldap4_new_connection() requires a valid lp_ctx

2024-04-23T23:50:33+00:00

Otherwise we'll crash in a lot of places later.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

util/charset: Rename utf16_len_n() to utf16_null_terminated_len_n()

2023-11-15T22:07:36+00:00

The new name indicates that — contrary to functions such as strnlen() —
the length may include the terminator.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett