[SCM] Samba Shared Repository - branch v4-17-test updated
The branch, v4-17-test has been updated via cee7ecee5ca s4-drsuapi: Give an error that matches windows on destination_dsa_guid lookup failure via c7658589fa5 s4-drsuapi: Clarify role of drs_security_access_check_nc_root() via dee90673865 s4-rpc_server: Pre-check destination_dsa_guid in GetNCChanges for validity via be0cb189202 s4-drsuapi: Use samdb_get_ntds_obj_by_guid() to find RODC in REPL_SECRET via fba94e5d504 s4-dsdb: Require that the NTDS object is an nTDSDSA objectclass via bcb89bd81d4 s4-dsdb: Split samdb_get_ntds_obj_by_guid() out of samdb_is_rodc() via a78c2094ff5 s4-rpc_server/drsuapi: Return correct error code for an invalid DN to EXOP_REPL_OBJ/EXOP_REPL_OBJ via 764702f788c s4-drs: Make drs_ObjectIdentifier_to_dn() safer and able to cope with DummyDN values via 7c32d3d75aa s4-dsdb: rework drs_ObjectIdentifier_to_dn() into drs_ObjectIdentifier_to_dn_and_nc_root() via 85cc464195b s4-rpc_server/drsuapi: Use dsdb_normalise_dn_and_find_nc_root() via 96adf5afc01 s4-dsdb: Add dsdb_normalise_dn_and_find_nc_root() around dsdb_find_nc_root() via deac11ab428 s4-dsdb: Add better debugging to dsdb_objects_have_same_nc() via 4413c277ef0 s4-dsdb: Make dsdb_find_nc_root() first try and use DSDB_CONTROL_CURRENT_PARTITION_OID via 24adeb3ad11 s4-dsdb: Schedule SD propegation only after successful rename via fedd276dbf1 s4-selftest/drs: Confirm GetNCChanges REPL_SECRET works with a DummyDN and real GUID via f6ebb660e54 s4-selftest/drs: Confirm GetNCChanges full replication works with a DummyDN and real GUID via fcc25f6baf8 s4-selftest/drs: Confirm GetNCChanges REPL_OBJ works with a DummyDN and real GUID via b0bbea3fdcd s4-selftest/drs Allow re-run of DRS tests after failed cleanup via 2cb965046b8 s4-selftest/drs Allow some DRS tests to operate against an IP via a81be075983 s4-selftest/drs Add test of expected return code for invaid DNs in GetNCChanges via 00d1f6223f2 s4-dsdb: Add tests of SamDB.get_nc_root() from ddf64adea13 s3/lib: Prevent use after free of messaging_ctdb_fde_ev structs https://git.samba.org/?p=samba.git;a=shortlog;h=v4-17-test - Log - commit cee7ecee5caea78beae099cbde4f34c7c0c663b7 Author: Andrew Bartlett Date: Wed Jan 25 15:24:57 2023 +1300 s4-drsuapi: Give an error that matches windows on destination_dsa_guid lookup failure BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher Autobuild-User(master): Stefan Metzmacher Autobuild-Date(master): Tue Jan 31 13:43:54 UTC 2023 on atb-devel-224 (cherry picked from commit 0f2978bbc0ed5b65d75c20472650a749643312e7) Autobuild-User(v4-17-test): Jule Anger Autobuild-Date(v4-17-test): Fri Feb 3 10:28:42 UTC 2023 on sn-devel-184 commit c7658589fa53a7905678361409341a916b0d41f5 Author: Andrew Bartlett Date: Wed Jan 25 16:01:48 2023 +1300 s4-drsuapi: Clarify role of drs_security_access_check_nc_root() BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher (cherry picked from commit 1838f349c94b878de1740af35351a2e8e0c8cffb) commit dee9067386531241846680e50dc892cc906b0a07 Author: Andrew Bartlett Date: Wed Jan 25 14:18:11 2023 +1300 s4-rpc_server: Pre-check destination_dsa_guid in GetNCChanges for validity This allows our new tests to pass as these need to be checked first. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher (cherry picked from commit 115a3a10440f44ba11029be5ae3a05534a7b98c0) commit be0cb18920243a422fe5bd77bb9ce241e71b4b62 Author: Andrew Bartlett Date: Wed Jan 25 15:24:01 2023 +1300 s4-drsuapi: Use samdb_get_ntds_obj_by_guid() to find RODC in REPL_SECRET We need to find the RODC per the destination_dsa_guid to mark the secrets as having been replicated, and by using samdb_get_ntds_obj_by_guid() we are stricter in the checks, as the RODC has to be the right objectClass (nTDSDSA) and under the CN=Configuration partition. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher (cherry picked from commit 09ec6a1db2d3b831548bf7d66475c486be29b1d1) commit fba94e5d50433e8869e72d0ae2bb68fa2abab03e Author: Andrew Bartlett Date: Wed Jan 25 15:18:47 2023 +1300 s4-dsdb: Require that the NTDS object is an nTDSDSA objectclass This should avoid a user being able to specify the GUID of a different type of object. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett Reviewed-by:
[SCM] Samba Shared Repository - annotated tag tevent-0.14.1 created
The annotated tag, tevent-0.14.1 has been created at bc0ca553a4abf1fc1ca9d994d9450d71c6cc82f0 (tag) tagging d80f28b081e515e32a480daf80b42cf782447a9c (commit) replaces samba-4.18.0rc1 tagged by Stefan Metzmacher on Fri Feb 3 10:52:00 2023 +0100 - Log - tevent: tag release tevent-0.14.1 -BEGIN PGP SIGNATURE- iQEzBAABCgAdFiEEkUejOXGVGO6QEby1R5ORYRMIQCUFAmPc2UAACgkQR5ORYRMI QCWcxAf/cQttDdJ4KbAoufU5dVBHHBjA2C33vP2wShpYp9/HFtXAoUY0v+XRc2Tf k5vFhiYiftzgxPSF9u2MUDj2xDXnTd39/5Gt52F6RoP8COqQ4CNpP9NINDtK3NhI 5UimpCuHqZRswl8tFcvC564InGYu8ui4EdqWB830qq1hSJDEkmEpVhbHmCqQ3YIa UgRZZBfDZVvwdwxDTwhxPyFy+r1ALnssBJIIN9+sbFsxiGR+xce5Oq+ValTmLeSr awqN1hSUi/uubOP7GRpXAmzDxXgFPp+Z4MD/hd8jtLVJGmweCOLoirqLpSVk7hbf zLXmSVEc0U3EX7ReA25Pq1SRHS9pNw== =xqkS -END PGP SIGNATURE- Andreas Schneider (10): python: Don't use deprecated escape sequences lib:util: Remove trailing whitespaces from time.c lib:util: Print data in ISO 8601 format lib:param: Remove trailing whitespaces from loadparm.c param: Use a higher time resolution for lp_file_list_changed() python:tests: Avoid exceptions in cleanup code if a test fails in smb3unix.py selftest: Only run samba.tests.smb3unix in developer mode s3:tests: Add support for SMBD_DONT_LOG_STDOUT=1 in test_chdir_cache.sh selftest: Update devel_env.sh for SAMBA_DCERPCD_DONT_LOG_STDOUT=1 script:autobuild: Make sure we can send a failure mail Andrew Bartlett (22): s4-dsdb: Rework dsdb_find_dn_by_guid() to use GUID_buf_string() s4-dsdb: Add tests of SamDB.get_nc_root() s4-selftest/drs Add test of expected return code for invaid DNs in GetNCChanges s4-selftest/drs Allow some DRS tests to operate against an IP s4-selftest/drs Allow re-run of DRS tests after failed cleanup s4-selftest/drs: Confirm GetNCChanges REPL_OBJ works with a DummyDN and real GUID s4-selftest/drs: Confirm GetNCChanges full replication works with a DummyDN and real GUID s4-selftest/drs: Confirm GetNCChanges REPL_SECRET works with a DummyDN and real GUID s4-dsdb: Schedule SD propegation only after successful rename s4-dsdb: Make dsdb_find_nc_root() first try and use DSDB_CONTROL_CURRENT_PARTITION_OID s4-dsdb: Add better debugging to dsdb_objects_have_same_nc() s4-dsdb: Add dsdb_normalise_dn_and_find_nc_root() around dsdb_find_nc_root() s4-rpc_server/drsuapi: Use dsdb_normalise_dn_and_find_nc_root() s4-dsdb: rework drs_ObjectIdentifier_to_dn() into drs_ObjectIdentifier_to_dn_and_nc_root() s4-drs: Make drs_ObjectIdentifier_to_dn() safer and able to cope with DummyDN values s4-rpc_server/drsuapi: Return correct error code for an invalid DN to EXOP_REPL_OBJ/EXOP_REPL_OBJ s4-dsdb: Split samdb_get_ntds_obj_by_guid() out of samdb_is_rodc() s4-dsdb: Require that the NTDS object is an nTDSDSA objectclass s4-drsuapi: Use samdb_get_ntds_obj_by_guid() to find RODC in REPL_SECRET s4-rpc_server: Pre-check destination_dsa_guid in GetNCChanges for validity s4-drsuapi: Clarify role of drs_security_access_check_nc_root() s4-drsuapi: Give an error that matches windows on destination_dsa_guid lookup failure David Mulder (14): samba-tool: gpo show command list policies samba-tool: Move create_directory_hier to a common file samba-tool: Move smb_connection to a common file samba-tool: gpo load/remove commands samba-tool: Test gpo load/remove commands samba-tool: gpo load/remove bytes samba-tool: gpo load/remove increment GPT.INI samba-tool: gpo load extension names samba-tool: gpo load add Registry ext by default samba-tool: gpo load set ntacl with SYSVOL file creation samba-tool: gpo load provide option for replace vs merge samba-tool: gpo show/load handle utf-16-le strings samba-tool: Test gpo show/load handling of utf-16-le strings samba-tool: Use ntstatus constants in gpo commands Jeremy Allison (1): s3:lib: Change file_modtime() to return an error code and a struct timespec. Joseph Sutton (1): python: Replace calls to deprecated methods Jule Anger (2): VERSION: Bump version up to 4.19.0pre1... WHATSNEW: Start release notes for Samba 4.19.0pre1. Michael Tokarev (1): spelling fixes for 4.18 (errror implemenation proces Controler) Noel Power (1): s3/lib: Prevent use after free of messaging_ctdb_fde_ev structs Pavel Filipenský (10): debug: Fix whitespaces in debug.c debug: Call depth: Interface debug: Call depth: Print ", depth=..." in the debug header debug: Call depth: Indent the debug text s3:winbind: Activate the call depth tracking in main winbindd s3:winbind: Deactivate call depth tracking in child winbindd s3:winbind: Move tevent_req_create() before debug macros to have the
