samba.git/source4/setup, branch master Unnamed repository; edit this file 'description' to name the repository. s4/dlz: add support for bind 9.20 2025-12-10T22:46:11+00:00 Michael Tokarev mjt@tls.msk.ru 2025-06-03T06:41:57+00:00 6488787d65ef02cc97b4b79587da6155ff369ac0 bind dlz interface does not change much, yet we build dlz_bind9_NN for every bind9 version NN we support - despite many of them differ only in soversion, with the code being identical. For bind9_20, use dlz_bind9_18.so which we already have. It'd be nice to extract actual bind9 version string in sambadns.py and use it in more direct way. Bug: https://bugzilla.samba.org/show_bug.cgi?id=15790 Signed-off-by: Michael Tokarev <mjt@tls.msk.ru> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Samuel Cabrero <scabrero@samba.org> Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org> Autobuild-Date(master): Wed Dec 10 22:46:11 UTC 2025 on atb-devel-224 
bind dlz interface does not change much, yet we build
dlz_bind9_NN for every bind9 version NN we support -
despite many of them differ only in soversion, with
the code being identical.

For bind9_20, use dlz_bind9_18.so which we already have.

It'd be nice to extract actual bind9 version string in
sambadns.py and use it in more direct way.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=15790

Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Samuel Cabrero <scabrero@samba.org>

Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Wed Dec 10 22:46:11 UTC 2025 on atb-devel-224
setup:adprep: Import the latest {Domain-Wide,Forest-Wide,Read-Only-Domain-Controller,Schema}-Updates.md 2025-08-27T03:41:36+00:00 Jennifer Sutton jennifersutton@catalyst.net.nz 2025-06-17T05:04:45+00:00 10d0d9700654b6f83611bcf927689528b7009093 Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
s4:setup: Fix spelling 2025-08-27T03:41:36+00:00 Jennifer Sutton jennifersutton@catalyst.net.nz 2025-06-17T04:28:03+00:00 4c1216108acaffc33f754cb5f5be493c1d37ac7b Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
schema: Add Validated-Write-Computer Extended Right from Windows Server 2016 2025-08-27T03:41:36+00:00 Jennifer Sutton jennifersutton@catalyst.net.nz 2025-06-17T04:22:56+00:00 5934b746adc80e39521eb69361374c905dc9870a Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> 
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
dsdb: Prepare to handle smartcard password rollover 2024-06-10T04:27:30+00:00 Andrew Bartlett abartlet@samba.org 2024-05-20T01:51:23+00:00 09ae48b415b2b50dbf4600e9c7f9cb4ec65a6263 We do this by allowing the password change control to indicate that the password is to be randomised, bypassing the quality checks (as true random passwords often fail these) and re-randomising with the same code as is used for the KDC. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz> 
We do this by allowing the password change control to indicate
that the password is to be randomised, bypassing the quality
checks (as true random passwords often fail these) and
re-randomising with the same code as is used for the KDC.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
s4:setup: Update name of dsdb password change control 2024-05-16T02:11:36+00:00 Jo Sutton josutton@catalyst.net.nz 2024-04-29T05:02:39+00:00 e4045cd5b15f0c60b8fc7c49936888731ce60274 Commit 0a907c2f45c34efcac784738c9d75303b9d04d2f renamed this control to DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Commit 0a907c2f45c34efcac784738c9d75303b9d04d2f renamed this control to
DSDB_CONTROL_PASSWORD_CHANGE_OLD_PW_CHECKED_OID.

Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s4:dsdb: Add dsdb control indicating that gMSA passwords are to be updated 2024-02-16T02:41:36+00:00 Jo Sutton josutton@catalyst.net.nz 2024-02-12T22:25:33+00:00 424882452fcea14ae2f48d5449b5f991f3dc5ee8 Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s4:setup: Remove empty line 2024-02-16T02:41:36+00:00 Jo Sutton josutton@catalyst.net.nz 2024-02-12T22:26:08+00:00 78565c5ee33b3bec8e8e85e141f1fb2867bdd5a9 Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
CVE-2018-14628: s4:setup: set the correct nTSecurityDescriptor on the CN=Deleted Objects container 2023-10-16T14:39:33+00:00 Stefan Metzmacher metze@samba.org 2016-01-29T22:34:15+00:00 7f8b15faa76d05023c987fac2c4c31f9ac61bb47 This revealed a bug in our dirsync code, so we mark test_search_with_dirsync_deleted_objects as knownfail. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13595 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
This revealed a bug in our dirsync code, so we mark
test_search_with_dirsync_deleted_objects as knownfail.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13595

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s4:setup: Fix script usage line 2023-09-14T21:35:29+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2023-09-05T04:21:50+00:00 2ff2d9bfa15d7c9ab7d96e34a868bf74f1e37deb Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>