summaryrefslogtreecommitdiff
path: root/libds
AgeCommit message (Collapse)AuthorFilesLines
2025-08-27s4:dsdb: Implement msDS-KeyCredentialLink attributeJennifer Sutton1-0/+1
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2025-08-27s4:dsdb:tests: Use sAMAccountName GUID constantJennifer Sutton1-0/+1
Signed-off-by: Jennifer Sutton <jennifersutton@catalyst.net.nz> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2024-02-16libds: remove unreachable break statements after returnRob van der Linde1-28/+0
Signed-off-by: Rob van der Linde <rob@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
2023-05-05libds: Add Managed Service Accounts well-known GUIDJoseph Sutton1-0/+1
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2022-12-15lib: Move 448 bytes from R/W data segment to R/O textVolker Lendecke1-44/+91
The linker has to relocate the pointers in the array at startup, save that. I know we have bigger .data blobs, but every bit counts :-) Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Dec 15 22:51:06 UTC 2022 on sn-devel-184
2022-12-15lib: Avoid an includes.hVolker Lendecke1-1/+4
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2022-12-15lib: Align an integer typeVolker Lendecke1-1/+1
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2022-09-16CVE-2020-25720 pydsdb: Add AD schema GUID constantsJoseph Sutton1-0/+14
This helps reduce the profusion of magic constant values in Python tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14810 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2022-09-16CVE-2020-25720 s4/dsdb/util: Add functions for dsHeuristics 28, 29Joseph Sutton1-0/+2
These are the newly-added AttributeAuthorizationOnLDAPAdd and BlockOwnerImplicitRights. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14810 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-11-09CVE-2020-25717: Add FreeIPA domain controller roleAlexander Bokovoy1-0/+1
As we want to reduce use of 'classic domain controller' role but FreeIPA relies on it internally, add a separate role to mark FreeIPA domain controller role. It means that role won't result in ROLE_STANDALONE. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14801 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2021-09-02pydsdb: Add API to return strings of known UF_ flagsAndrew Bartlett3-0/+56
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2018-03-13libds: rename UF_MACHINE_ACCOUNT_MASK to UF_TRUST_ACCOUNT_MASKRalph Boehme1-1/+1
The name UF_TRUST_ACCOUNT_MASK better reflects the use case and it's not yet used. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2017-12-14flags.h: Introduce the 2016 function level constantGarming Sam1-0/+1
Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2016-01-13Avoid including libds/common/roles.h in public loadparm.h header.Jelmer Vernooij1-3/+3
Signed-Off-By: Jelmer Vernooij <jelmer@samba.org> Reviewed-By: Andrew Bartlett <abartlet@samba.org> Reviewed-By: Stefan Metzmacher <metze@samba.org>
2015-10-20dsdb: Add functional levels for 2012 and 2012R2Andrew Bartlett1-1/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
2015-01-22dsdb-samldb: Only allow known and settable userAccountControl bits to be setAndrew Bartlett1-4/+13
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Pair-programmed-with: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2015-01-22libds: UF_PARTIAL_SECRETS_ACCOUNT is a flag, not an account typeAndrew Bartlett1-2/+1
This list should only be of the account exclusive account type bits. Note, this corrects the behaviour in samldb modifies of userAccountControl. This reverts 6cb91a8f33516a33210a25e4019f3f3fbbfe61f2 Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993 Pair-programmed-with: Garming Sam <garming@catalyst.net.nz> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Garming Sam <garming@catalyst.net.nz> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2014-04-02libds: add UF_PARTIAL_SECRETS_ACCOUNT to UF_ACCOUNT_TYPE_MASKStefan Metzmacher1-1/+2
Change-Id: Ie26520c37c393ab4d2e3c5782e3dca46d4d1f83c Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2012-06-15lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett1-7/+3
controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
2012-05-15s3-auth: remove "security=server" (depricated since 3.6)Stefan Metzmacher1-2/+17
"security=server" has a lot of problems in the world with modern security (ntlmv2 and krb5). It was also not very reliable, as it needed a stable connection to the password server for the lifetime of the whole client connection! Please use "security=domain" or "security=ads" is you authentication against remote servers (domain controllers). metze -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SERVER | | security=server | | | | | | 12 May | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-03-04s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett1-2/+19
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-01-14Intersite KCC flagsDave Craft1-0/+5
NTDSSITELINK option flags added Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-11-17libds: Make server role values explicit for easier debuggingAndrew Bartlett1-1/+6
2011-11-17param: calculate server role from security, and security from server roleAndrew Bartlett1-1/+1
This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
2011-11-17roles: Add ROLE_AUTO to indicate that the server role is calculatedAmitay Isaacs1-1/+4
2011-10-27s4:objectclass_attrs LDB module - implement the dSHeuristics length checks ↵Matthias Dieter Wallnöfer1-1/+9
correctly Consider bug #8489 Reviewed-by: abartlet
2011-07-14NTDSConnection and NTDSA Site setting flagsDave Craft1-0/+20
Flags that were missing from flags.h or were incorrectly defined inline to the kcc_topology.c code (and thus unusable elsewhere). These are the NTDSConnection and NTDSDSA Site settings flags. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-21lib/util Remove samba-util-common!Andrew Bartlett1-1/+1
All of this code is now in common, so we don't need the second '-common' library any more! Andrew Bartlett
2011-06-10libds/common/flag_mapping.h: fix licence/copyrightGünther Deschner1-0/+22
Guenther
2011-05-08libds: moved enum security_types to a common headerAndrew Tridgell1-0/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-05-03libds: added roles.h for server rolesAndrew Tridgell2-0/+43
this will allow us to move the server roles in common, which will make it much easier to mix s3/s4 calls in the one C file Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-13libds: Make flag_mapping a libraryAndrew Bartlett1-3/+5
This is a tiny library, but otherwise the functions end up in multiple other libraries. Andrew Bartlett
2011-03-01libds/common/flag_mapping.c - fix another build dependencySean Finney1-0/+1
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Mar 1 18:53:40 CET 2011 on sn-devel-104
2011-02-28Fix some typesJelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Feb 28 23:30:06 CET 2011 on sn-devel-104
2011-02-24build: moved libds/common/flag_mapping.c into a common subsystemAndrew Tridgell3-0/+17
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-28libds: added mS-DS-ReplicatesNCReason flagsAndrew Tridgell1-1/+11
these define why a KCC connection was made
2010-10-15s4:libds/common/flags.h - fix typoMatthias Dieter Wallnöfer1-1/+1
2010-09-29libds: added more UF_ -> ACB_ flags mappingsAndrew Tridgell2-2/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
2010-09-24libds:flag_mapping.c - support also the default read-only DC primary groupMatthias Dieter Wallnöfer1-1/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-09-12libds:flag_mapping.c - introduce a call which maps the "userAccountControl" ↵Matthias Dieter Wallnöfer1-0/+13
to the default primary group RID
2010-09-12libds:flag_mapping.c - fix counter variable typesMatthias Dieter Wallnöfer1-2/+3
2010-08-26Added values for the flags in dSHeuristicsNadezhda Ivanova1-0/+23
These specify the character position, while the character value of that character controls behavior
2010-08-17s4-dsdb: added support for UF_PARTIAL_SECRETS_ACCOUNTAndrew Tridgell1-0/+1
when this is in user_account_control the account is a RODC, and we need to set the primaryGroupID to be DOMAIN_RID_READONLY_DCS Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-10libds/common/flags.h - fix a comment's typoMatthias Dieter Wallnöfer1-1/+1
2010-06-23libds:common Remove DS_DC_* domain functionality flagsAndrew Bartlett1-8/+4
These are just a subset of the DS_DOMAIN_ functionality flags, are compared and often confused with each other. Just make them one set. Andrew Bartlett
2010-05-26flags.h - fix comment for "GTYPE_SECURITY_UNIVERSAL_GROUP" constantMatthias Dieter Wallnöfer1-1/+1
2010-05-03Replaced DS_FLAG_ATTR_IS_CRITICAL with SCHEMA_FLAG_ATTR_IS_CRITICAL.Nadezhda Ivanova1-3/+0
2010-05-03Added a couple of systemFlags, needed for determining filtered attributes.Nadezhda Ivanova1-0/+4
2010-04-22s4-drs: Do not allow system-critical attributes to be RODC filteredFernando J V da Silva1-0/+3
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-12libds: added recyclebin feature GUIDAndrew Tridgell1-0/+3
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-06 17:16:40 +0000