samba.git/source4/setup, branch talloc-2.1.6

build:wafsamba: Install named.conf only once

2015-11-16T10:48:14+00:00

The wildcard *.conf already lists named.conf. Adding files
more than once will cause unnecessary rebuilds and raise
errors in later Waf versions.

Signed-off-by: Thomas Nagy 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Michael Adam

dbcheck: Add explict tests for unknown and unsorted attributeID values

2015-08-24T21:46:22+00:00

Unknown attributeID values would cause an exception previously, and
unsorted attributes cause a failure to replicate with Samba 4.2.

In commit 61b978872fe86906611f64430b2608f5e7ea7ad8 we started
to sort these values correctly, but previous versions of Samba
did not sort them correctly (we sorted high-bit-set values as
negative), and then after 9c9df40220234cba973e84b4985d90da1334a1d1
we stoped accepting these.

To ensure we are allowed to make this unusual change to the
replPropertyMetaData, a new OID is allocated and checked
for in repl_meta_data.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10973

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

s4-setup: Add saltPrincipal to secrets_dns.ldif

2015-04-24T11:02:37+00:00

This adds the correct salt principal to the secretsdb so that we
generate a valid keytab entries for AES and DES keys. The test doesn't
fails with Heimdal cause it always uses RC4 which doesn't have a salt.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlet 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Apr 24 13:02:37 CEST 2015 on sn-devel-104

s4-dsdb: Define internal dsdb control to mark Tombstone reanimation requests

2015-02-03T04:02:11+00:00

Tombstone reanimation requries some special handling which is going
to affect several modules. Most notably:
 - a bit different access checks in acl.c
 - restore certain attributes during modify requests in samldb.c

Control added also to schema_samba4.ldif by Andrew Bartlett
hence the "pair programmed with" tag.

Change-Id: Ief4f7dabbbdc2570924fae48c30ac9c531a701f4
Pair-programmed-with: Andrew Bartlett 
Signed-off-by: Kamen Mazdrashki 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Garming Sam

CVE-2014-8143:dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl

2015-01-15T13:54:47+00:00

This requires an additional control to be used in the
LSA server to add domain trust account objects.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Karolin Seeger 
Autobuild-Date(master): Thu Jan 15 14:54:47 CET 2015 on sn-devel-104

s4-dns: Add support for BIND 9.10

2014-10-25T03:42:19+00:00

Signed-off-by: Amitay Isaacs 
Reviewed-by: Matthieu Patou 

Autobuild-User(master): Amitay Isaacs 
Autobuild-Date(master): Sat Oct 25 05:42:19 CEST 2014 on sn-devel-104

s4-dns: Update template variables, change BIND98 --> BIND9_8

2014-10-25T01:21:04+00:00

This makes it easier to add suport for BIND 9.10.

Signed-off-by: Amitay Isaacs 
Reviewed-by: Matthieu Patou

selftest: Fix test samba4.blackbox.group.py

2014-10-23T13:56:04+00:00

The test created two users and in later steps it tried adding two
non-existend users to groups. This fix adds now the two created
accounts to the groups instead.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10871

Signed-off-by: Marc Muehlfeld 
Reviewed-by: Michael Adam

s4:setup/dns_update_list: make use of the new substitution variables

2014-08-26T09:38:54+00:00

This let us register the same names as Windows Servers.

We only exception are the NS records. In future we could add them
by using something like this:

  samba-tool dns add ${HOSTNAME} ${DNSDOMAIN} @ NS ${HOSTNAME}
  samba-tool dns add ${HOSTNAME} _msdcs.${DNSFOREST} @ NS ${HOSTNAME}
  samba-tool dns add ${HOSTNAME} ${DNSFOREST} _msdcs NS ${HOSTNAME}

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9831

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Tue Aug 26 11:38:54 CEST 2014 on sn-devel-104

selftest: make blackbox_setpassword.sh test run independently

2014-04-02T15:12:45+00:00

Change-Id: I8f3cdfc2c66800f9a1e11aec4f25a42752b6b205
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher