samba.git/source4, branch master

s4:torture: Retry DsExecuteKCC on NT_STATUS_DS_BUSY

2026-04-23T07:55:04+00:00

The KCC service runs a periodic samba_kcc child process (every 300s,
first at 15s after startup) with a 40 second timeout. If a test calls
DsExecuteKCC while the periodic child is running, kccsrv returns
NT_STATUS_DS_BUSY which propagates as EPT_NT_CANT_PERFORM_OP to the
client, causing flaky test failures.

UNEXPECTED(error): samba4.drs.samba_tool_drs_showrepl.python(schema_pair_dc).samba_tool_drs_showrepl.SambaToolDrsShowReplTests.test_samba_tool_showrepl(schema_pair_dc:local)
REASON: Exception: Exception: Traceback (most recent call last):
  File "/builds/samba-testbase/samba-def-build/source4/torture/drs/python/samba_tool_drs_showrepl.py", line 57, in test_samba_tool_showrepl
    kcc_out = self.check_output("samba-tool drs kcc %s %s" % (self.dc1,
  File "/builds/samba-testbase/samba-def-build/bin/python/samba/tests/__init__.py", line 593, in check_output
    raise BlackboxProcessError(retcode, line, stdoutdata, stderrdata)
samba.tests.BlackboxProcessError: Command 'python3 bin/samba-tool drs kcc liveupgrade1dc -USCHEMADOMAIN/Administrator%locDCpass1'; shell True; exit status 255;
stdout: ''; stderr: 'ERROR(runtime): DsExecuteKCC failed - (3221356597, 'The operation cannot be performed.')

3221356597 => 0xc0020035 (EPT_NT_CANT_PERFORM_OP)

Signed-off-by: Andreas Schneider 
Reviewed-by: Douglas Bagnall 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Thu Apr 23 07:55:04 UTC 2026 on atb-devel-224

dsdb: use wellknow object IDs for new user and computer objects

2026-04-08T15:41:21+00:00

this allows redirusr and redircmp to work as expected

BUG: https://bugzilla.samba.org/show_bug.cgi?id=9143

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Bjoern Jacke 
Signed-off-by: Stefan Metzmacher 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Wed Apr  8 15:41:21 UTC 2026 on atb-devel-224

s4/dns_server: truncate large dns packets over udp and set truncated flag

2026-04-01T05:08:14+00:00

Large DNS response must be truncated over UDP, letting client retry over TCP. Current threshold is set to 1232 as it is regarded as a safe size.
Truncated packets have no answers nor record, only the packet header and initial question(s).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15988

Signed-off-by: Andréas Leroux 
Reviewed-by: Douglas Bagnall 
Reviewed-by: Gary Lockyer 

Autobuild-User(master): Jennifer Sutton 
Autobuild-Date(master): Wed Apr  1 05:08:14 UTC 2026 on atb-devel-224

auth: Use secure variant data_blob_talloc_s() to zero sensitive data blobs

2026-03-31T08:15:33+00:00

Signed-off-by: Pavel Filipenský 
Reviewed-by: Andreas Schneider

s4:torture:rpc: spoolss fix cast-align warnings

2026-03-20T14:30:23+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Fri Mar 20 14:30:23 UTC 2026 on atb-devel-224

s4:torture:rpc: samr fix cast-align warnings

2026-03-20T13:27:34+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke

s4:torture:rpc: netlogon fix cast-align warnings

2026-03-20T13:27:34+00:00

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke

s4:torture:rpc: iremotewinspool fix cast-align warnings

2026-03-20T13:27:34+00:00

suppress warnings with discard_align_p

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke

s4:torture:raw: search fix cast-align warnings

2026-03-20T13:27:34+00:00

Use memcpy to extract the pointer, suppressing the cast-align warnings

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke

s4:torture:libnetapi: group fix cast-align warnings

2026-03-20T13:27:34+00:00

Adds code to check that buffer is aligned correctly for the expected types.
Then suppresses the cast-align warnings with discard_align_p

Signed-off-by: Gary Lockyer 
Reviewed-by: Volker Lendecke