samba.git/source4, branch talloc-2.1.10

s4:http/gensec: add missing tevent_req_done() to gensec_http_ntlm_update_done()

2017-07-21T21:29:39+00:00

This was missing in commit d718e92d5e145dccd492c46febc249e462ce50c6.

Sadly we can't have automated tests for this as we only implement
the client side for this protocol.

I've tested with using:

bin/smbtorture \
  -W BLA --realm=BLA.BASE \
  -s /dev/null -Uadministrator%A1b2C3d4 \
  ncacn_http:w2k8r2-219[593,RpcProxy=w2k8r2-219.bla.base,HttpUseTls=false,HttpAuthOption=basic] \
  rpc.epmapper.epmapper.Lookup_simple \

and:

bin/smbtorture \
  -W BLA --realm=BLA.BASE \
  -s /dev/null -Uadministrator%A1b2C3d4 \
  ncacn_http:w2k8r2-219[593,RpcProxy=w2k8r2-219.bla.base,HttpUseTls=false,HttpAuthOption=ntlm] \
  rpc.epmapper.epmapper.Lookup_simple \

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12919

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Jul 21 23:29:39 CEST 2017 on sn-devel-144

getncchanges: Do not segfault if somehow we get 0 results from an ldb_search with scope BASE

2017-07-21T07:30:25+00:00

This should not happen, but we have seen this happen in autobuild
before the whole-DB locking issues were resolved by
https://bugzilla.samba.org/show_bug.cgi?id=12858

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam

s4-torture: point out why we cannot validate MSZIP compressed files

2017-07-19T23:38:02+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Thu Jul 20 01:38:02 CEST 2017 on sn-devel-144

librpc/ndr: add MSZIP compression for cabinet files

2017-07-19T19:22:13+00:00

Signed-off-by: Aurelien Aptel 
Reviewed-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

librpc: use DATA_BLOB in CFDATA structure

2017-07-19T19:22:13+00:00

Signed-off-by: Aurelien Aptel 
Reviewed-by: Guenther Deschner 
Reviewed-by: Jeremy Allison

Build py3 versions of other rpc modules

2017-07-14T09:36:53+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12905

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Fri Jul 14 11:36:53 CEST 2017 on sn-devel-144

py3: Make sure to specify METH_VARARGS together with METH_KEYWORDS

2017-07-14T05:10:24+00:00

A Python 3 bug https://bugs.python.org/issue15657 explains that one should
always use METH_VARARGS|METH_KEYWORDS when defining a function rather
than a lonely METH_KEYWORDS. We had only one definition like this in
Samba and it was the one that affects FreeIPA when running in Python 3
mode.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12905

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Andrew Bartlett

CVE-2017-11103: Orpheus' Lyre KDC-REP service name validation

2017-07-12T15:44:50+00:00

In _krb5_extract_ticket() the KDC-REP service name must be obtained from
encrypted version stored in 'enc_part' instead of the unencrypted version
stored in 'ticket'.  Use of the unecrypted version provides an
opportunity for successful server impersonation and other attacks.

Identified by Jeffrey Altman, Viktor Duchovni and Nico Williams.

Change-Id: I45ef61e8a46e0f6588d64b5bd572a24c7432547c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12894
(based on heimdal commit 6dd3eb836bbb80a00ffced4ad57077a1cdf227ea)

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Wed Jul 12 17:44:50 CEST 2017 on sn-devel-144

vfs_fruit: add fruit:model = parametric option

2017-07-12T01:17:57+00:00

fruit:model = iMac
fruit:model = MacBook
fruit:model = MacPro
fruit:model = Xserve

will all display a different icon inside Finder.

Formerly, we used "Samba" which resulted in a "?" icon in Finder, with
the new default "MacSamba" we appear with a computer box icon at least.

Guenther

Bug: https://bugzilla.samba.org/show_bug.cgi?id=12840

Signed-off-by: Guenther Deschner 
Signed-off-by: Ralph Boehme 
Reviewed-by: Ralph Boehme 

Autobuild-User(master): Günther Deschner 
Autobuild-Date(master): Wed Jul 12 03:17:57 CEST 2017 on sn-devel-144

delete duplicate test

2017-07-08T03:57:55+00:00

Signed-off-by: Herb Lewis 
Reviewed-by: Richard Sharpe 

Autobuild-User(master): Herb Lewis 
Autobuild-Date(master): Sat Jul  8 05:57:55 CEST 2017 on sn-devel-144