tries smb3 encryption on an anonymous
session,
we used to allow that before commit da7dcc443f45d07d9963df9daae458fbdd991a47
was released with samba-4.15.0rc1.
Testing against Windows Server 2022 revealed that anonymous signing is
always
allowed (with the session key derived from
()
via 960724a06e4 ldb: ldb_comparison_fold always uses the casecmp
function
via edabb9f4cb9 ldb-samba: use ldb_comparison_fold_utf8()
via 0becc8a90cb ldb-samba: add ldb_comparison_fold_utf8, wrapping
strncasecmp_ldb
via f9797950fd6 util:charset: strncasecmp_ldb avoids
| 19 +---
dfs_server/dfs_server_ad.c | 8 +-
docs-xml/smbdotconf/misc/dnsclientname.xml | 17
lib/param/loadparm.c | 37
.../tests/blackbox/rpcd_witness_samba_only.py | 3 +-
python/samba/tests/dckeytab.py
(smbXcli_conn_has_async_calls(cli->conn)) {
- /*
- * Can't use sync call while an async call is in flight
-*/
- status = NT_STATUS_INVALID_PARAMETER;
- goto fail;
- }
- ev = samba_tevent_context_init(frame);
- if (ev == NULL) {
- goto fail;
- }
- req = cli_list_trans_send(frame, ev, cli, mask, attribute, info_level);
- if (req == NULL) {
- goto fail;
- }
- if (!tevent_req_poll_ntstatus(req, ev, )) {
--
Samba Shared Repository
The branch, master has been updated
via bdfbf25255e test_kinit_export_keytab: reset pw of the test account
and test --only-current-keys
via b4be5718d3d samba-tool: let 'samba-tool domain exportkeytab' take
an --only-current-keys option
via 2793ef3e163 samba.tests.dckeytab
() parameters in correct order
‘account_name’ and ‘server_name’ are passed in the wrong order. While
Samba ignores the account name parameter and doesn’t have a problem with
it missing its trailing dollar, Windows checks it and requires the
trailing dollar to be present.
Signed-off
locked(frame, fsp->file_id);
- if (lck == NULL) {
- status = NT_STATUS_OK;
- goto out;
- }
-
- delete_on_close_set = is_delete_on_close_set(lck, name_hash);
+ get_file_infos(fsp->file_id, name_hash, _on_close_set, NULL);
if (delete_on_close_set) {
status = NT_STATUS_DELETE_PENDING;
goto out;
--
Samba Shared Repository
endecke
Reviewed-by: Jeremy Allison
---
Summary of changes:
libcli/auth/tests/test_schannel.c | 4 +-
python/samba/tests/reparsepoints.py | 24
python/samba/tests/smb3unix.py | 41 ++
source3/libsmb/cli_smb2_fnum.c | 1 +
s
ne:
SAFE_FREE( data.dptr );
@@ -4922,7 +4924,7 @@ void wcache_store_ndr(struct winbindd_domain *domain,
uint32_t opnum,
SBVAL(data.dptr, 4, timeout);
memcpy(data.dptr + 12, resp->data, resp->length);
- tdb_store(wcache->tdb, key, data, 0);
+ tdb_store(w
/ustring.h', lib='icui18n'):
conf.fatal('Found icui18n, but unicode/ustring.h is missing')
conf.DEFINE('HAVE_UTF8_NORMALISATION', 1)
+else:
+conf.env['icu-libs'] = ''
--
Samba Shared Repository
Lendecke
Autobuild-User(master): Pavel Filipensky
Autobuild-Date(master): Tue May 14 13:37:53 UTC 2024 on atb-devel-224
---
Summary of changes:
python/samba/tests/smb3unix.py | 18 ++
1 file changed
| 45 +++-
lib/krb5_wrap/krb5_samba.h | 11 +
lib/replace/system/kerberos.h | 3 +
libgpo/pygpo.c | 75 +-
python/samba/tests/ntlm_auth.py | 2 +-
python/s
237d9d0228c tests/ntacls: unblock failing gitlab pipelines because
test_setntacl_forcenative
via 380d9c5a739 .gitlab-ci-main.yml: debug kernel details of the
current runner
from 9844ac289be ldb-samba: ldif_read_objectSid avoids VLA
https://git.samba.org/?p=samba.git;a=shortlog;h
Release Announcements
-
This is the latest stable release of the Samba 4.20 release series.
Changes since 4.20.0
o Douglas Bagnall
* BUG 15630: dns update debug message is too noisy.
o Alexander Bokovoy
* BUG 15635: Do not fail PAC
The branch, master has been updated
via 2ec8209 NEWS[4.20.1]: Samba 4.20.1 Available for Download
from 4728e21 NEWS[4.19.6]: Samba 4.19.6 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The branch, v4-20-stable has been updated
via 0ba948cba0b VERSION: Disable GIT_SNAPSHOT for the 4.20.1 release.
via d01b50ec4f3 WHATSNEW: Add release notes for Samba 4.20.1.
via db658c40f5d s3:utils: Fix Inherit-Only flag being automatically
propagated to children
The annotated tag, samba-4.20.1 has been created
at dc3912d4f21e57549c2062e03c9bf94afb9d8307 (tag)
tagging 0ba948cba0b8b0dd4fddbc94999a61b883a3326d (commit)
replaces samba-4.20.0
tagged by Jule Anger
on Wed May 8 10:05:04 2024 +0200
- Log
The branch, v4-20-test has been updated
via 9b6bc91254c VERSION: Bump version up to Samba 4.20.2...
via 0ba948cba0b VERSION: Disable GIT_SNAPSHOT for the 4.20.1 release.
via d01b50ec4f3 WHATSNEW: Add release notes for Samba 4.20.1.
from db658c40f5d s3:utils: Fix
The branch, master has been updated
via 9844ac289be ldb-samba: ldif_read_objectSid avoids VLA
via bf4af1a28a3 ldb-samba: ldif_read_objectSid() short-circuits without
'S'
via 6c0bdf37187 lib/fuzzing: add fuzz_stable_sort_r_unstable
via 59cbaa91348 ldb: note
runners and this meant our CI was being redirected to
our private runners at a larger cost to the Samba Team.
The new infrastructure is much larger than when we last
selected runners so we can just use the default, even for
the code coverage build.
BUG: https
TUS gensec_kerberos_possible(struct gensec_security *gensec_security)
+{
+ struct cli_credentials *creds = gensec_get_credentials(gensec_security);
+ bool auth_requested = cli_credentials_authentication_requested(creds);
+ enum credentials_use_kerberos krb5_state =
+ cli_credentials_get_kerberos_state(creds);
+ char *user_principal = NULL;
+ const char *client_realm = cli_credentials_get_realm(creds);
+ const char *target_principal =
gensec_get_target_principal(gensec_security);
+ const char *hostname = gensec_get_target_hostname(gensec_security);
+
+ if (!auth_requested) {
+ return NT_STATUS_INVALID_PARAMETER;
+ }
+
+ if (krb5_state == CRED_USE_KERBEROS_DISABLED) {
--
Samba Shared Repository
The branch, v4-19-test has been updated
via b00c09bee3b s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via e703c0c3914 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 2930a1955bf libcli/http: Detect unsupported
The branch, v4-20-test has been updated
via db658c40f5d s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via d28a889aed2 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 83da49f3489 tests: Add a test for "all_g
Signed-off-by: Volker Lendecke
Reviewed-by: Jeremy Allison
---
Summary of changes:
libcli/smb/reparse.c | 12 +-
libcli/smb/reparse.h| 5 +
python/samba/tests/reparsepoints.py | 104 +--
selftest/knownfail.d/reparse
LOB root_key_data_blob = {
.data = root_key_data, .length = sizeof root_key_data};
--
Samba Shared Repository
== NULL) {
+ return false;
+ }
- if (!lines || numlines < 1) {
- TALLOC_FREE(lines);
- return False;
+ len = getline(, , f);
+ if (len >= 0) {
+ ret = string_to_sid(sid, line);
+ SAFE_FREE(line);
}
- ret = string_to_sid(sid, lines[0]);
- TALLOC_FREE(lines);
+ fclose(f);
return ret;
}
diff --git a/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
b/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
index 29d224c427d..1129576f751 100644
--- a/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
+++ b/source3/rpc_server/srvsvc/srv_srvsvc_nt.c
@@ -30,6 +30,7 @@
#include "librpc/rpc/dcesrv_core.h"
#include "librpc/gen_ndr/ndr_srvsvc.h"
#include "librpc/gen_ndr/ndr_srvsvc_scompat.h"
+#include "librpc/gen_ndr/ndr_open_files.h"
#include "../libcli/security/security.h"
#include "../librpc/gen_ndr/ndr_security.h"
--
Samba Shared Repository
String(PyExc_TypeError, "Expected string as
value");
return -1;
@@ -729,7 +733,7 @@ static int obj_setitem(PyTdbObject *self, PyObject *key,
PyObject *value)
if (ret != 0) {
PyErr_SetTDBError(self->ctx);
return -1;
- }
+ }
return ret;
}
--
Samba Shared Repository
The branch, master has been updated
via 80159018e41 s3:utils: Fix Inherit-Only flag being automatically
propagated to children
via eba2bfde347 python/samba/tests/blackbox: Add tests for Inherit-only
flag propagation
from 96b5cfe4e6c s3:libsmb: Pass a memory context
t_ss, int port,
@@ -103,8 +110,10 @@ struct tevent_req *cli_full_connection_creds_send(
int flags,
struct smb2_negotiate_contexts *negotiate_contexts);
NTSTATUS cli_full_connection_creds_recv(struct tevent_req *req,
+ TALLOC_CTX *mem_ctx,
--
Samba Shared Repository
| 14 +++---
lib/crypto/gkdi.c | 2 +-
lib/ldb/pyldb.c | 1 -
python/samba/gkdi.py | 6 ++
python/samba/samdb.py | 7 +++
python/samba/tests
lib/crypto/gnutls_helpers.h| 6 +
lib/crypto/gnutls_server_end_point_cb.c| 130
lib/crypto/wscript | 6 +-
lib/ldb-samba/ldb_ildap.c | 9 +-
lib/param/loadparm.c | 1 -
lib/param/
ce4/dsdb/common/rodc_helper.c
+++ b/source4/dsdb/common/rodc_helper.c
@@ -243,7 +243,7 @@ WERROR samdb_confirm_rodc_allowed_to_repl_to(struct
ldb_context *sam_ctx,
{
TALLOC_CTX *frame = talloc_stackframe();
WERROR werr;
- uint32_t num_token_sids;
+ uint32_t num_token_sids = 0;
struct dom_sid *token_sids;
const struct dom_sid *object_sid = NULL;
--
Samba Shared Repository
dcerpc_binding_handle *binding_handle;
+ /*
+* This is per association_group, but
+* for now we only have one connection
+* per association_group.
+*/
+ uint16_t bind_time_features;
+
struct ndr_syntax_id abstract_syntax;
struct ndr_syntax_id transfer_syntax;
bool verified_pcontext;
--
Samba Shared Repository
The branch, master has been updated
via 2674df4cc0e s3:libsmb: let cli_tree_connect_creds() only call
cli_credentials_get_password() if needed
via aff2932c420 python/samba/getopt: don't prompt for a password for
--use-krb5-ccache=...
via 0ba9e5dacbb lib/cmdline: only call
(): free
on failure
via 42f2d96f82a ldb-samba:ldif_handlers: ldif_read_objectSid(): free a
thing on failure
via 6722e80d1b3 ldb-samba: ldif-handlers: make
ldif_comparison_objectSid() accurate
via 4af670384a1 s4:dsdb: fix spelling in comment
via a9eaf8a3abe ldb: comment
| 1 -
python/samba/nt_time.py | 18 +-
python/samba/tests/krb5/gmsa_tests.py | 202 +++-
python/samba/tests/krb5/kdc_base_test.py | 52 +--
python/samba/tests/krb5/lockout_tests.py | 5 +-
selftest
The branch, master has been updated
via 0159c48e897 ctdb-scripts: Do not de-duplicate the interfaces list
from 7a5e7b82125 python: Fix NtVer check for site_dn_for_machine()
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log
Mulder
Autobuild-User(master): Andreas Schneider
Autobuild-Date(master): Wed Apr 17 19:32:11 UTC 2024 on atb-devel-224
---
Summary of changes:
python/samba/gp/gpclass.py | 4 +---
1 file changed, 1 insertion(+), 3
*domain,
DEBUG(10, ("ads lookup_groupmem: got %d sids via extended dn call\n",
(int)num_members));
- status = add_primary_group_members(ads, mem_ctx, rid,
+ status = add_primary_group_members(ads, mem_ctx, rid, domain->name,
, _members);
if (!NT_STATUS_IS_OK(status)) {
DEBUG(10, ("%s: add_primary_group_members failed: %s\n",
--
Samba Shared Repository
if (fsp == NULL) {
@@ -5202,7 +5203,7 @@ NTSTATUS smbd_do_setfilepathinfo(connection_struct *conn,
case SMB_FILE_LINK_INFORMATION:
{
- if (conn->sconn->using_smb2) {
+ if (conn_using_smb2(conn->sconn)) {
status = smb2_file_link_information(conn,
req,
pdata,
--
Samba Shared Repository
public_ifaces="$public_ifaces \"$iface;options=dynamic\""
+ done
+
+ if [ -n "$CTDB_SAMBA_INTERFACES_EXTRA" ]; then
+ public_ifaces="$public_ifaces $CTDB_SAMBA_INTERFACES_EXTRA"
+ fi
+ public_ifaces=$(echo "$publ
ncy, hex_output);
}
diff --git a/lib/tdb/wscript b/lib/tdb/wscript
index 2c587fbee44..04121498723 100644
--- a/lib/tdb/wscript
+++ b/lib/tdb/wscript
@@ -216,7 +216,8 @@ def testonly(ctx):
if not os.path.exists(link):
os.symlink(ctx.path.make_node('test').abspath(), link)
-sh_tests = ["test/test_tdbbackup.sh test/jenkins-be-hash.tdb"]
+sh_tests = ["test/test_tdbbackup.sh test/jenkins-be-hash.tdb",
+"test/test_tdbdump.sh test/sample_tdb.tdb
test/sample_tdb.txt test/sample_tdb_x.txt"]
for sh_test in sh_tests:
cmd = "BINDIR=%s %s" % (blddir, sh_test)
--
Samba Shared Repository
The branch, v4-20-test has been updated
via 215bb9bd48e Do not fail checksums for RFC8009 types
via db60a1947b8 s4:dns_server: less noisy, more informative debug
messages
via 9155d89a2ae packaging: Provide a systemd service file for samba-bgqd
from 077f39baf7c
5_KT_END) {
+ DEBUG(1, ("Failed to get next entry: %s\n",
+ error_message(k5ret)));
+ (void)smb_krb5_kt_free_entry(krbctx, );
+ }
k5ret = krb5_kt_end_seq_get(krbctx, keytab, );
if (k5ret) {
--
Samba Shared Repository
files not as an automatically constructed environment.
This makes:
BACKUP_FILE=samba-backup-2024-04-11T14-10-20.437096.tar.bz2
SELFTEST_TESTENV=customdc make testenv
work again.
Signed-off-by: Andrew Bartlett
Reviewed-by: Jo Sutton
commit aa6795b32ff6335c2136f9c97482da6a0
aram/loadparm.c
@@ -952,6 +952,8 @@ void loadparm_s3_init_globals(struct loadparm_context
*lp_ctx,
Globals.kdc_enable_fast = true;
+ Globals.winbind_debug_traceid = true;
+
Globals.aio_max_threads = 100;
lpcfg_string_set(Globals.ctx,
--
Samba Shared Repository
b_send(
}
} else {
/* No host or dest_ss given. Error out. */
- tevent_req_error(req, EINVAL);
+ tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER_MIX);
return tevent_req_post(req, ev);
}
--
Samba Shared Repository
i, rec_count - 1);
+ NDR_PRINT_DEBUG(dnsp_DnssrvRpcRecord,
[i]);
}
was_tombstoned = true;
}
--
Samba Shared Repository
via 19250e13ab6 Add simple http_client for use in black box tests (in
following commits)
from eaefe50327d VERSION: Bump version up to Samba 4.20.1...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-20-test
- Log -
commit
via 6636ec3bb2a Add simple http_client for use in black box tests (in
following commits)
from 4b7785226ad VERSION: Bump version up to Samba 4.19.7...
https://git.samba.org/?p=samba.git;a=shortlog;h=v4-19-test
- Log -
commit
ruct
dom_sid *sid2)
return 1;
/* Compare most likely different rids, first: i.e start at end */
- if (sid1->num_auths != sid2->num_auths)
- return sid1->num_auths - sid2->num_auths;
-
+ if (sid1->num_auths != sid2->num_auths) {
+
: PyErr_LDB_DN_OR_RAISE makes more rigourous
checks
via 8bb6287c3ba pytest:segfault: some more ldb crashes
via 0bf80c10ca5 samba-tool domain backup: Use new ldb.disconnect()
method to force-close files during backup
via 8612b3e38b3 ldb:pytests: test ldb.connect() works after
ssion: Use struct initialization
via 005ce15aab3 python/samba/tests: Fix gMSA blackbox test to expect
failure to get password after membership change
via 50f424e8d35 s3:rpc_server: Implement _lsa_CreateTrustedDomainEx3()
via 8df1728e124 s3:rpc_server:
Release Announcements
-
This is the latest stable release of the Samba 4.19 release series.
Changes since 4.19.5
o Ralph Boehme
* BUG 15527: fd_handle_destructor() panics within an
smbd_smb2_close() if
vfs_stat_fsp() fails in fd_close().
o
The branch, v4-19-stable has been updated
via b400092dd0a VERSION: Disable GIT_SNAPSHOT for the 4.19.6 release.
via 8333c396015 WHATSNEW: Add release notes for Samba 4.19.6.
via 0ac741b5705 s3/smbd: If we fail to close file_handle ensure we
should reset the fd
via
The branch, master has been updated
via 4728e21 NEWS[4.19.6]: Samba 4.19.6 Available for Download
from f8e7137 NEWS[4.20.0]: Samba 4.20.0 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The annotated tag, samba-4.19.6 has been created
at 4826796513729aad06646b9ab838910737d52d09 (tag)
tagging b400092dd0a5248544f6e05fc4f85bcc0efb6a3c (commit)
replaces samba-4.19.5
tagged by Jule Anger
on Mon Apr 8 09:30:50 2024 +0200
- Log
The branch, v4-19-test has been updated
via 4b7785226ad VERSION: Bump version up to Samba 4.19.7...
via b400092dd0a VERSION: Disable GIT_SNAPSHOT for the 4.19.6 release.
via 8333c396015 WHATSNEW: Add release notes for Samba 4.19.6.
from 0ac741b5705 s3/smbd: If we
le to verify these checksums when running
with both MIT Kerberos and Heimdal Kerberos. This matters for FreeIPA
domain controller which uses them by default.
[2023/06/16 21:51:04.923873, 10, pid=51149, effective(0, 0), real(0, 0)]
../../lib/krb5_wrap/krb5_samba.c:1496(s
= $interfaces
diff --git a/lib/util/unix_match.h b/source3/include/fstring.h
similarity index 76%
copy from lib/util/unix_match.h
copy to source3/include/fstring.h
index a7b693500b2..dfc8f17a8f3 100644
--- a/lib/util/unix_match.h
+++ b/source3/include/fstring.h
@@ -1,7 +1,6 @@
/*
Unix SMB/CIFS i
quot;,
(int)num_members));
- status = add_primary_group_members(ads, mem_ctx, rid,
+ status = add_primary_group_members(ads, mem_ctx, rid, domain->name,
, _members);
if (!NT_STATUS_IS_OK(status)) {
DEBUG(10, ("%s: add_primary_group_members failed: %s\n",
--
Samba Shared Repository
EACCES)) {
@@ -1214,6 +1215,11 @@ int file_ntimes(connection_struct *conn,
unbecome_root();
}
+done:
+ if (ret == 0) {
+ copy_stat_ex_timestamps(fsp, ft);
+ }
+
return ret;
}
--
Samba Shared Repository
uct open_symlink_err
via 331a49ca394 smbd: Fix returning symlink stat info in the NO_OPATH
case
via a2a77842a13 smbd: Make read_symlink_reparse() return a
reparse_data_buffer
via 57e548841f9 smbd: Simplify users of fsp_fullbasepath()
from 06c589aaa1a python/samba/tests
The branch, master has been updated
via 06c589aaa1a python/samba/tests/krb5: Extend PKINIT tests to cover
UF_SMARTCARD_REQUIRED
via f29693d1311 python/tests/krb5: Prepare to allow tests that use the
PAC returned NT hash
via 2fd5166a8c1 python/tests/krb5: Allow getting
Release Announcements
-
This is the first stable release of the Samba 4.20 release series.
Please read the release notes carefully before upgrading.
NEW FEATURES/CHANGES
New Minimum MIT Krb5 version for Samba AD Domain Controller
The branch, v4-20-stable has been updated
via 8fdd82c8b9c VERSION: Disable GIT_SNAPSHOT for the 4.20.0 release.
via 797464b7624 WHATSNEW: Add release notes for Samba 4.20.0.
via 5cedf3b5eb0 Revert "token_util.c: prefer capabilities over
become_root"
via f
The branch, master has been updated
via f8e7137 NEWS[4.20.0]: Samba 4.20.0 Available for Download
from 1fac108 NEWS[4.18.11]: Samba 4.18.11 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The annotated tag, samba-4.20.0 has been created
at 5e0b7110dac9b3e9d4c304c407095541e212315d (tag)
tagging 8fdd82c8b9ccc39f0b5f5d6cc22fa69f67c913a4 (commit)
replaces samba-4.20.0rc4
tagged by Jule Anger
on Wed Mar 27 18:10:07 2024 +0100
- Log
The branch, v4-20-test has been updated
via eaefe50327d VERSION: Bump version up to Samba 4.20.1...
via 8fdd82c8b9c VERSION: Disable GIT_SNAPSHOT for the 4.20.0 release.
via 797464b7624 WHATSNEW: Add release notes for Samba 4.20.0.
from 5cedf3b5eb0 Revert
rity_info_sent, const struct
"Override chmod\n",
fsp_str_dbg(fsp)));
-
set_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ become_root();
sret = SMB_VFS_FCHMOD(fsp, posix_perms);
-
drop_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ unbecome_root();
}
if (sret == -1) {
--
Samba Shared Repository
== AT_FDCWD) in
smbd (smbd[192.168.10) (client [192.168.100.15]) pid 9744
(4.21.0pre1-DEVELOPERBUILD)
[2024/02/20 09:23:48.454844, 0, pid=9744]
../../lib/util/fault.c:190(smb_panic_log)
If you are running a recent Samba version, and if you think this problem
is not yet fixed in the lat
smbd (smbd[192.168.10) (client [192.168.100.15]) pid 9744
(4.21.0pre1-DEVELOPERBUILD)
[2024/02/20 09:23:48.454844, 0, pid=9744]
../../lib/util/fault.c:190(smb_panic_log)
If you are running a recent Samba version, and if you think this problem
is not yet fixed in the latest vers
gi.basic_info.out.write_time,
+ nttime,
ret, done,
"Wrong write time\n");
torture_assert_u64_equal_goto(tctx,
- nttime,
rity_info_sent, const struct
"Override chmod\n",
fsp_str_dbg(fsp)));
-
set_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ become_root();
sret = SMB_VFS_FCHMOD(fsp, posix_perms);
-
drop_effective_capability(DAC_OVERRIDE_CAPABILITY);
+ unbecome_root();
}
if (sret == -1) {
--
Samba Shared Repository
| 265 +-
libcli/http/http_internal.h | 4 +
python/samba/tests/blackbox/http_chunk.py | 116
python/samba/tests/blackbox/http_content.py | 95 +++
selftest/tests.py | 2 +
source3/auth/auth_winbind.c
NDR_CHECK(ndr_pull_security_ace_coda(_ndr_coda,
NDR_SCALARS|NDR_BUFFERS, >coda));
--
Samba Shared Repository
_set_switch_value(_ndr_coda,
>coda, r->type));
NDR_CHECK(ndr_pull_security_ace_coda(_ndr_coda,
NDR_SCALARS|NDR_BUFFERS, >coda));
--
Samba Shared Repository
Autobuild-Date(v4-20-test): Fri Mar 22 11:06:51 UTC 2024 on atb-devel-224
---
Summary of changes:
python/samba/tests/krb5/authn_policy_tests.py | 372 ++
selftest/knownfail_mit_kdc| 8
The branch, master has been updated
via 7edf5467fc7 lib: Remove timeval_set()
via a3e186b6171 lib: Remove timeval_until()
via 842e7378439 fuzz:fuzz_ndr_X: don't skip printing on push error
via cebe12bc85a ldb-samba: matching rules: notify of search failure
Jo Sutton
Reviewed-by: Andrew Bartlett
---
Summary of changes:
auth/credentials/credentials_gmsa.c | 2 -
python/samba/nt_time.py | 8 +-
python/samba/tests/dckeytab.py| 11
traceback is printed twice -- once in conventional Python style
for clarity, and once with extra "full" information.
Signed-off-by: Douglas Bagnall
Reviewed-by: Andrew Bartlett
---
Summary of chang
pointer. Samba assumes this means
a NULL pointer, rather than a zero offset.
Credit to OSS-Fuzz.
REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66777
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15606
Signed-off-by: Douglas Bagnall
Reviewed-by: Andrew
gnall
Reviewed-by: Andrew Bartlett
---
Summary of changes:
.../dcerpc.py => python/samba/domain/__init__.py | 9 +-
.../samba/{netcmd => }/domain/models/__init__.py | 1 +
.../{netcmd => }/domain/mode
Definition Language has extensions
for
conditional ACEs and resource attribute ACEs; these are now supported
by Samba.
+Service Witness Protocol [MS-SWN]
+-
+
+In a ctdb cluster it is now possible to provide
+the SMB witness service that allows clients to
+monitor
a
claim that uses 0 as a relative data pointer. Samba assumes this means
a NULL pointer, rather than a zero offset.
Credit to OSS-Fuzz.
REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66777
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15606
Signed-off
ADS_SASL_PLAIN);
-
+
return 0;
}
--
Samba Shared Repository
The branch, v4-20-test has been updated
via 69b69bb2085 libgpo: Do not segfault if we don't have a valid
security descriptor
via 72bd247c97d libgpo: Fix trailing spaces in pygpo.c
from 4d1536f86b9 VERSION: Bump version up to Samba 4.20.0rc5...
https://git.samba.org/?p
The branch, master has been updated
via 97a23e57dc8 s4-auth/kerberos: Report errors observed during
smb_krb5_remove_obsolete_keytab_entries()
via 9d7a97dc982 samba-tool domain exportkeytab: Refuse to overwrite an
existing file in full-db export
via a0867595fbd s4-libnet
The branch, master has been updated
via c97071726e1 packaging: Provide a systemd service file for samba-bgqd
from 6ee3f809a54 s3/smbd: If we fail to close file_handle ensure we
should reset the fd
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log
Release Announcements
-
This is the latest stable release of the Samba 4.18 release series.
There will be security releases only beyond this point.
Changes since 4.18.10
-
o Martin Schwenke
* BUG 15580: Packet marshalling push support missing
The branch, master has been updated
via 1fac108 NEWS[4.18.11]: Samba 4.18.11 Available for Download
from 9506c5e NEWS[4.20.0rc4]: Samba 4.20.0rc4 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
The branch, v4-18-stable has been updated
via 4017976e8c0 VERSION: Disable GIT_SNAPSHOT for the 4.18.11 release.
via 2edd0aac9f1 WHATSNEW: Add release notes for Samba 4.18.11.
via 081a6d5fc1d ctdb-protocol: Add missing push support for new controls
via 18305d8d86c
The annotated tag, samba-4.18.11 has been created
at 181a7b50e0983c6bf3916ed5eec31ba25f2a4e51 (tag)
tagging 4017976e8c0f5d1ae79ea01f1d4a46608ee0f61f (commit)
replaces samba-4.18.10
tagged by Jule Anger
on Wed Mar 13 16:50:56 2024 +0100
- Log
The branch, v4-18-test has been updated
via 105e6d817dd VERSION: Bump version up to Samba 4.18.12...
via 4017976e8c0 VERSION: Disable GIT_SNAPSHOT for the 4.18.11 release.
via 2edd0aac9f1 WHATSNEW: Add release notes for Samba 4.18.11.
from 081a6d5fc1d ctdb-protocol
2.168.100.15]) pid 9744
(4.21.0pre1-DEVELOPERBUILD)
[2024/02/20 09:23:48.454844, 0, pid=9744]
../../lib/util/fault.c:190(smb_panic_log)
If you are running a recent Samba version, and if you think this problem
is not yet fixed in the latest versions, please consider reporting this bug
strerror(ret));
tevent_req_error(req, ret);
goto deregister_get_db;
--
Samba Shared Repository
ove unused declarations in smbXsrv.idl
from 0e40506d21b selftest: add tests for "samba-tool user list
--locked-only"
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 072cb98e4326c4124c649e91197
The branch, master has been updated
via 0e40506d21b selftest: add tests for "samba-tool user list
--locked-only"
via 055b4cd50f8 samba-tool: add "samba-tool user list --locked-only"
from b13d4359f2f libgpo: Do not segfault if we don't have a valid
Release Announcements
=
This is the fourth release candidate of Samba 4.20. This is *not*
intended for production environments and is designed for testing
purposes only. Please report any defects via the Samba bug reporting
system at https://bugzilla.samba.org/.
Samba 4.20
The branch, master has been updated
via 9506c5e NEWS[4.20.0rc4]: Samba 4.20.0rc4 Available for Download
from 6c2a8b4 NEWS[4.20.0rc3]: Samba 4.20.0rc3 Available for Download
https://git.samba.org/?p=samba-web.git;a=shortlog;h=master
- Log
1 - 100 of 192278 matches
Mail list logo
