abartlet/samba-debian.git
3 years agoAdd bug number for samba/talloc breakage and fix master
Andrew Bartlett [Mon, 4 Apr 2016 20:03:20 +0000 (08:03 +1200)]
Add bug number for samba/talloc breakage and fix

3 years agoOwn the changelog entry so I can build the package
Andrew Bartlett [Mon, 4 Apr 2016 07:37:35 +0000 (19:37 +1200)]
Own the changelog entry so I can build the package

3 years agos3:wscript: pylibsmb depends on pycredentials
Stefan Metzmacher [Tue, 15 Mar 2016 15:59:51 +0000 (16:59 +0100)]
s3:wscript: pylibsmb depends on pycredentials

The need for pytalloc-util was based on the fact that
pycredentials depends on pytalloc-util.

As pylibsmb only used pycredentials and not pytalloc-util directly,
we should depend on pycredentials.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
(cherry picked from commit 74ca470739e0128556d8d20010464df07f2f0ac8)

3 years agolibsmb/pysmb: add pytalloc-util dependency to fix the build.
Günther Deschner [Mon, 1 Feb 2016 22:11:13 +0000 (23:11 +0100)]
libsmb/pysmb: add pytalloc-util dependency to fix the build.

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Tue Feb  2 15:49:14 CET 2016 on sn-devel-144

(cherry picked from commit 943e69ca8fd4491004eafbf29ed2ca748b0b7480)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789

3 years agobuild: mark explicit dependencies on pytalloc-util
Garming Sam [Tue, 15 Mar 2016 00:29:54 +0000 (13:29 +1300)]
build: mark explicit dependencies on pytalloc-util

All subsystems that include pytalloc.h need to link against
pytalloc-util.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789

Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Garming Sam <garming@samba.org>
Autobuild-Date(master): Tue Mar 15 07:08:16 CET 2016 on sn-devel-144

(similar to commit 7b431eba22444d2e0d872de781a8193dcfa6d252)

Backported to 4.3 by Andrew Bartlett

3 years agopydsdb: Fix returning of ldb.MessageElement.
Andrew Bartlett [Tue, 16 Feb 2016 02:15:44 +0000 (15:15 +1300)]
pydsdb: Fix returning of ldb.MessageElement.

This object is not based on pytalloc_Object and so this causes
a segfault (later a failure) when the struct definitions diverge.
We must also not reuse the incoming ldb_message_element as a talloc
context and overwrite the values, instead we should create a new
object and return that.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(cherry picked from commit b96b1e88f760c92c7d9bb7e732f72d7e73a68907)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789

3 years agopydsdb: Also accept ldb.MessageElement values to dsdb routines
Andrew Bartlett [Tue, 22 Sep 2015 03:25:30 +0000 (15:25 +1200)]
pydsdb: Also accept ldb.MessageElement values to dsdb routines

This shows the correct way to accept a value that may be a list of strings
or a proper ldb.MessageElement.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
(cherry picked from commit b48776d78b446ad4abd4a6bc2ba6b488a29b11d2)
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11789

3 years agoMerge tag 'upstream/4.3.6+dfsg'
Andrew Bartlett [Mon, 4 Apr 2016 07:13:24 +0000 (19:13 +1200)]
Merge tag 'upstream/4.3.6+dfsg'

Upstream version 4.3.6+dfsg

3 years agoImported Upstream version 4.3.6+dfsg
Andrew Bartlett [Mon, 4 Apr 2016 07:13:18 +0000 (19:13 +1200)]
Imported Upstream version 4.3.6+dfsg

3 years agoMerge tag 'upstream/4.3.6'
Andrew Bartlett [Mon, 4 Apr 2016 07:11:44 +0000 (19:11 +1200)]
Merge tag 'upstream/4.3.6'

Upstream version 4.3.6

3 years agoImported Upstream version 4.3.6
Andrew Bartlett [Mon, 4 Apr 2016 07:11:37 +0000 (19:11 +1200)]
Imported Upstream version 4.3.6

3 years agoImported Upstream version 4.3.6
Andrew Bartlett [Mon, 4 Apr 2016 07:04:55 +0000 (19:04 +1200)]
Imported Upstream version 4.3.6

3 years agoAdd patches from Samba bug #11789 to work with talloc 2.1.6
Andrew Bartlett [Mon, 4 Apr 2016 06:06:58 +0000 (18:06 +1200)]
Add patches from Samba bug #11789 to work with talloc 2.1.6

3 years agoAdd no_build_options.patch: make package more reproducible by disabling build options...
Jelmer Vernooij [Sun, 3 Apr 2016 18:37:52 +0000 (18:37 +0000)]
Add no_build_options.patch: make package more reproducible by disabling build options output.

3 years agoChangelog for previous commits
Mathieu Parent [Sun, 3 Apr 2016 12:26:24 +0000 (14:26 +0200)]
Changelog for previous commits

3 years agoctdb: Fix detection of gnukfreebsd (Closes: #802621)
Steven Chamberlain [Thu, 11 Feb 2016 02:27:29 +0000 (02:27 +0000)]
ctdb: Fix detection of gnukfreebsd (Closes: #802621)

GNU/kFreeBSD's platform name is 'gnukfreebsd', not just 'kfreebsd'.

3 years agoAdd ufw integration
Mathieu Parent [Sun, 3 Apr 2016 05:34:17 +0000 (07:34 +0200)]
Add ufw integration

Cherry-picked from Ubuntu:
- Created debian/samba.ufw.profile:
- debian/rules, debian/samba.install: install profile
- debian/control: suggest ufw

3 years agoAdd an override to script-not-executable etc/ctdb/events.d/10.external
Mathieu Parent [Fri, 1 Apr 2016 19:43:10 +0000 (21:43 +0200)]
Add an override to script-not-executable etc/ctdb/events.d/10.external

3 years agoChangelog for previous commit
Mathieu Parent [Fri, 1 Apr 2016 15:56:34 +0000 (17:56 +0200)]
Changelog for previous commit

3 years agoDrop samba from winbind depends and use samba-common* instead (Closes: #732604)
Mathieu Parent [Fri, 1 Apr 2016 10:47:55 +0000 (12:47 +0200)]
Drop samba from winbind depends and use samba-common* instead (Closes: #732604)

samba-common has smb.conf creation which is mandatory.

samba-common-bin has the net command which may be used to join a domain.

3 years agoImported Upstream version 4.4.0
Andrew Bartlett [Fri, 1 Apr 2016 02:12:47 +0000 (15:12 +1300)]
Imported Upstream version 4.4.0

3 years agoChangelog for previous commit
Mathieu Parent [Thu, 31 Mar 2016 20:29:06 +0000 (22:29 +0200)]
Changelog for previous commit

3 years agoFix FTBFS when built with dpkg-buildpackage -A (Closes: #818146)
Mathieu Parent [Thu, 31 Mar 2016 20:25:29 +0000 (22:25 +0200)]
Fix FTBFS when built with dpkg-buildpackage -A (Closes: #818146)

3 years agoMerge branch 'unstable' of https://jelmer.uk/code/samba into unstable
Jelmer Vernooij [Wed, 9 Mar 2016 03:58:24 +0000 (03:58 +0000)]
Merge branch 'unstable' of https://jelmer.uk/code/samba into unstable

3 years agoreleasing package samba version 2:4.3.6+dfsg-1
Jelmer Vernooij [Wed, 9 Mar 2016 02:58:06 +0000 (02:58 +0000)]
releasing package samba version 2:4.3.6+dfsg-1

3 years agoreleasing package samba version 2:4.3.5+dfsg-3
Jelmer Vernooij [Tue, 8 Mar 2016 00:46:23 +0000 (00:46 +0000)]
releasing package samba version 2:4.3.5+dfsg-3

3 years agoIgnore debhelper build stamp.
Jelmer Vernooij [Tue, 8 Mar 2016 00:28:36 +0000 (00:28 +0000)]
Ignore debhelper build stamp.

3 years agoRebuild against current version of ldb in the archive. Closes: #817036
Jelmer Vernooij [Tue, 8 Mar 2016 00:28:06 +0000 (00:28 +0000)]
Rebuild against current version of ldb in the archive. Closes: #817036

3 years agoFix dhclient hook if samba is not installed. Thanks, Jan Braun. Closes: #801976
Jelmer Vernooij [Tue, 8 Mar 2016 00:24:13 +0000 (00:24 +0000)]
Fix dhclient hook if samba is not installed. Thanks, Jan Braun. Closes: #801976

3 years agoreleasing package samba version 2:4.3.5+dfsg-2
Jelmer Vernooij [Sun, 6 Mar 2016 22:52:46 +0000 (22:52 +0000)]
releasing package samba version 2:4.3.5+dfsg-2

3 years agoMove strict ldb dependency to samba-dsdb-modules package, which actually contains...
Jelmer Vernooij [Sun, 6 Mar 2016 22:52:14 +0000 (22:52 +0000)]
Move strict ldb dependency to samba-dsdb-modules package, which actually contains the modules. Closes: #816210

3 years agoNew upstream release.
Jelmer Vernooij [Sat, 27 Feb 2016 23:36:56 +0000 (23:36 +0000)]
New upstream release.

3 years agoMerge tag 'upstream/4.3.6+orig' into unstable
Jelmer Vernooij [Sun, 6 Mar 2016 19:31:16 +0000 (19:31 +0000)]
Merge tag 'upstream/4.3.6+orig' into unstable

Upstream version 4.3.6+orig

3 years agoImported Upstream version 4.3.6+orig
Jelmer Vernooij [Sun, 6 Mar 2016 19:30:59 +0000 (19:30 +0000)]
Imported Upstream version 4.3.6+orig

3 years agoIgnore debhelper-build-stamp.
Jelmer Vernooij [Sun, 6 Mar 2016 19:30:36 +0000 (19:30 +0000)]
Ignore debhelper-build-stamp.

3 years agoreleasing package samba version 2:4.3.5+dfsg-1
Jelmer Vernooij [Sat, 5 Mar 2016 17:14:02 +0000 (17:14 +0000)]
releasing package samba version 2:4.3.5+dfsg-1

3 years agoBump standards version to 3.9.7 (no changes).
Jelmer Vernooij [Sun, 28 Feb 2016 03:17:37 +0000 (03:17 +0000)]
Bump standards version to 3.9.7 (no changes).

3 years agoAdd smbclient_krb5_wrapper.
Jelmer Vernooij [Sun, 28 Feb 2016 02:52:53 +0000 (02:52 +0000)]
Add smbclient_krb5_wrapper.

3 years agoIgnore debian build stamp files.
Jelmer Vernooij [Sun, 28 Feb 2016 02:32:26 +0000 (02:32 +0000)]
Ignore debian build stamp files.

3 years agoIgnore backup files.
Jelmer Vernooij [Sat, 27 Feb 2016 23:52:53 +0000 (23:52 +0000)]
Ignore backup files.

3 years agoDrop patch sockets-with-htons.patch: applied upstream.
Jelmer Vernooij [Sat, 27 Feb 2016 23:52:36 +0000 (23:52 +0000)]
Drop patch sockets-with-htons.patch: applied upstream.

3 years agoUpdate usershare patch after upstream changes.
Jelmer Vernooij [Sat, 27 Feb 2016 23:48:46 +0000 (23:48 +0000)]
Update usershare patch after upstream changes.

3 years agoLoosen dependencies on ldb to ldb >= 1.1.21, per upstream.
Jelmer Vernooij [Sat, 27 Feb 2016 23:44:38 +0000 (23:44 +0000)]
Loosen dependencies on ldb to ldb >= 1.1.21, per upstream.

3 years agoWrap and sort.
Jelmer Vernooij [Sat, 27 Feb 2016 23:38:57 +0000 (23:38 +0000)]
Wrap and sort.

3 years agoNew upstream release.
Jelmer Vernooij [Sat, 5 Mar 2016 15:56:45 +0000 (15:56 +0000)]
New upstream release.

3 years agoMerge tag 'upstream/4.3.5+dfsg' into unstable
Jelmer Vernooij [Sat, 5 Mar 2016 17:42:59 +0000 (17:42 +0000)]
Merge tag 'upstream/4.3.5+dfsg' into unstable

3 years agoImported Upstream version 4.3.5+dfsg
Jelmer Vernooij [Sat, 5 Mar 2016 17:42:09 +0000 (17:42 +0000)]
Imported Upstream version 4.3.5+dfsg

3 years agoVERSION: Disable git snapshots for the 4.3.5 release.
Karolin Seeger [Mon, 22 Feb 2016 09:32:56 +0000 (10:32 +0100)]
VERSION: Disable git snapshots for the 4.3.5 release.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
3 years agoWHATSNEW: Add release notes for Samba 4.3.5.
Karolin Seeger [Mon, 22 Feb 2016 09:32:08 +0000 (10:32 +0100)]
WHATSNEW: Add release notes for Samba 4.3.5.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
3 years agoctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."
Martin Schwenke [Mon, 8 Feb 2016 04:55:17 +0000 (15:55 +1100)]
ctdb-scripts: Drop use of "smbcontrol winbindd ip-dropped ..."

This is unnecessary in Samba >= 4.0 because winbindd monitors IP
address itself and no longer needs to be told when they are dropped.
The smbcontrol commands can hang if a node has recovery mode active
because smbcontrol is unable to connect to the registry.  Therefore,
the smbcontrol commands should be removed.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11719

Signed-off-by: Martin Schwenke <martin@meltin.net>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Feb 10 14:08:17 CET 2016 on sn-devel-144

(cherry picked from commit 519564bb35a0f840bc4d7c8c5a92441c97b49791)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb 16 12:13:06 CET 2016 on sn-devel-104

3 years agolib/tsocket: workaround sockets not supporting FIONREAD
Ralph Boehme [Thu, 4 Feb 2016 14:35:06 +0000 (15:35 +0100)]
lib/tsocket: workaround sockets not supporting FIONREAD

Netlink sockets don't support querying pending bytes with ioctl(fd,
FIONREAD, ...) and would return EOPNOTSUPP, so use recvmsg() with
MSG_PEEK|MSG_TRUNC as a fallback.

The MSG_TRUNC flag to recvmsg() is Linux only, but netlink is as well,
so we're safe for now.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11714

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Martin Schwenke <martin@meltin.net>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Feb 10 10:30:24 CET 2016 on sn-devel-144

(cherry picked from commit 574313a1e11d521ba3f7232ff0b4186b49658199)

3 years agoparam: Fix str_list_v3 to accept ; again
Volker Lendecke [Thu, 11 Feb 2016 12:11:46 +0000 (13:11 +0100)]
param: Fix str_list_v3 to accept ; again

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Feb 11 19:19:55 CET 2016 on sn-devel-144
https://bugzilla.samba.org/show_bug.cgi?id=11732

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Mon Feb 15 14:36:43 CET 2016 on sn-devel-104

3 years agoloadparm: Fix memory leak issue.
Hemanth Thummala [Tue, 2 Feb 2016 18:33:20 +0000 (10:33 -0800)]
loadparm: Fix memory leak issue.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11708

Signed-off-by: Hemanth Thummala <hemanth.thummala@nutanix.com>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Thu Feb  4 12:39:14 CET 2016 on sn-devel-144

(cherry picked from commit 8247d93701ed838190fe74044a63a56d63d37bf5)

3 years agos3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL...
Jeremy Allison [Tue, 9 Feb 2016 20:47:43 +0000 (12:47 -0800)]
s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support.

Since 4.0.x we add 2 additional ACE entries, one SMB_ACL_USER
and SMB_ACL_GROUP to match the existing SMB_ACL_USER_OBJ and
SMB_ACL_GROUP_OBJ entries. The two additional entries break
the simple "must have 3 entries" check done inside convert_canon_ace_to_posix_perms().
Replace this with a more complete test.

Problem and initial fix provided by <tcleamy@ucdavis.edu>

BUG: https://bugzilla.samba.org/show_bug.cgi?id=10489

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Uri Simchoni <uri@samba.org>
Autobuild-User(master): Uri Simchoni <uri@samba.org>
Autobuild-Date(master): Thu Feb 11 11:14:53 CET 2016 on sn-devel-144

(cherry picked from commit 5172bf0c5b0672c1479c2ad776460956aa469bca)

3 years agos3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file.
Jose A. Rivera [Thu, 4 Feb 2016 02:58:19 +0000 (20:58 -0600)]
s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11727

Signed-off-by: Jose A. Rivera <jarrpa@samba.org>
Pair-programmed-with: Ira Cooper <ira@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Fri Feb  5 04:37:43 CET 2016 on sn-devel-144

(cherry picked from commit aec07b8b60ff9589a3c84eef6adeca464e6c01f6)

3 years agodocs-xml: fix typo in smbspool_krb5_wrapper manpage.
Günther Deschner [Wed, 3 Feb 2016 23:00:46 +0000 (00:00 +0100)]
docs-xml: fix typo in smbspool_krb5_wrapper manpage.

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit 109164ed63ee76c4088f5df7ffb66740cac629c1)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb  9 12:03:49 CET 2016 on sn-devel-104

3 years agodocs: Add smbspool_krb5_wrapper manpage
Andreas Schneider [Wed, 3 Feb 2016 08:20:27 +0000 (09:20 +0100)]
docs: Add smbspool_krb5_wrapper manpage

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11690

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Feb  3 21:25:54 CET 2016 on sn-devel-144

(cherry picked from commit 4c54901102440ba9cbd96b349e95e3127415614a)

3 years agopython:tests/core: add tests for arcfour_encrypt() and string_to_byte_array()
Stefan Metzmacher [Thu, 28 Jan 2016 14:10:00 +0000 (15:10 +0100)]
python:tests/core: add tests for arcfour_encrypt() and string_to_byte_array()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Feb  3 11:42:29 CET 2016 on sn-devel-144

(cherry picked from commit 915185aa585a622d338698f847171972d1a15a21)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Fri Feb  5 13:10:00 CET 2016 on sn-devel-104

3 years agos4:scripting/devel: make use of the generic arcfour_encrypt() and string_to_byte_arra...
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
s4:scripting/devel: make use of the generic arcfour_encrypt() and string_to_byte_array() functions

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 8841b1e641e1b950c2f36b26db982473b73b9d3b)

3 years agopython:samba/netcmd/domain: make use of the generic arcfour_encrypt() and string_to_b...
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
python:samba/netcmd/domain: make use of the generic arcfour_encrypt() and string_to_byte_array() functions

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 452234b7bcdee2e0e3df6e0500ff798062bc5b9e)

3 years agopython:samba/join.py: make use of the generic arcfour_encrypt() and string_to_byte_ar...
Stefan Metzmacher [Thu, 28 Jan 2016 13:00:38 +0000 (14:00 +0100)]
python:samba/join.py: make use of the generic arcfour_encrypt() and string_to_byte_array() functions

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit d5423feb4b3d388d2de8e1745a8f1138b42b64f5)

3 years agopython:samba: add a generic arcfour_encrypt() helper function
Stefan Metzmacher [Thu, 28 Jan 2016 12:52:44 +0000 (13:52 +0100)]
python:samba: add a generic arcfour_encrypt() helper function

This works with Crypto.Cipher.ARC4 (from python*-crypto) and
fallback to M2Crypto.RC4.RC4 (from [python*-]m2crypto).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 078a7ae71081c24991bb34c818cc2c763eefad99)

3 years agopython:samba: add a generic string_to_byte_array() helper function
Stefan Metzmacher [Thu, 28 Jan 2016 12:44:33 +0000 (13:44 +0100)]
python:samba: add a generic string_to_byte_array() helper function

We should avoid implementing this again and again.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11699

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 65127d16744763d0865ca9ce4d039866785e3fc7)

3 years agoctdb-common: Use documented names for protocol family in socket()
Amitay Isaacs [Thu, 28 Jan 2016 13:06:18 +0000 (00:06 +1100)]
ctdb-common: Use documented names for protocol family in socket()

Instead of using PF_*, use AF_*.

https://bugzilla.samba.org/show_bug.cgi?id=11705

Signed-off-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 9f94620a308a3b17c1886c2c4807b34b8d5edacb)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Feb  4 14:29:13 CET 2016 on sn-devel-104

3 years agoRelease 2:4.3.3+dfsg-2
Mathieu Parent [Thu, 4 Feb 2016 12:25:16 +0000 (13:25 +0100)]
Release 2:4.3.3+dfsg-2

3 years agoctdb-common: Protocol argument must be in host order for socket() call
Amitay Isaacs [Thu, 28 Jan 2016 13:05:26 +0000 (00:05 +1100)]
ctdb-common: Protocol argument must be in host order for socket() call

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11705

Signed-off-by: Amitay Isaacs <amitay@gmail.com>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 9f8395cb7d49b63a82f75bf504f5f83920102b29)

3 years agoFix CTDB behavior since CVE-2015-8543 (Closes: #813406)
Mathieu Parent [Wed, 3 Feb 2016 21:25:34 +0000 (22:25 +0100)]
Fix CTDB behavior since CVE-2015-8543 (Closes: #813406)

3 years agos3: smbd: Fix timestamp rounding inside SMB2 create.
Jeremy Allison [Fri, 29 Jan 2016 00:35:13 +0000 (16:35 -0800)]
s3: smbd: Fix timestamp rounding inside SMB2 create.

Setting "dos filetime resolution = yes" should round
to 2 second increments. Fix missing path inside smbd.

Fix confirmed by reporter Hubert Gilch <hg@sepag.de>.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11703

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Fri Jan 29 10:41:01 CET 2016 on sn-devel-144

(cherry picked from commit 8024f532e6bcb6cbd8179817fafdd0f12929d629)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Feb  2 15:33:08 CET 2016 on sn-devel-104

3 years agosmbd: show correct disk size for different quota and dfree block sizes
Uri Simchoni [Tue, 19 Jan 2016 12:57:16 +0000 (14:57 +0200)]
smbd: show correct disk size for different quota and dfree block sizes

When file system stats (VFS disk_free_fn) and quota (VFS get_quota_fn)
return different block sizes, normalize values before comparing.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11681

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 67c89715d00abc588239d8220f09cf51a58db05a)

3 years agos3:utils/smbget fix recursive download
Christian Ambach [Wed, 30 Dec 2015 20:25:13 +0000 (21:25 +0100)]
s3:utils/smbget fix recursive download

get_auth_data is called multiple times (once for the directory listing and then
for every file to be downloaded). Save the obtained values across multiple calls
to make smbclient use the correct username for each download.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=6482
Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
(cherry picked from commit ec802d27ce4dc6dd9b5e5ebd6992f90364d855a2)

3 years agowaf: Only build smb_krb5_wrapper if we have CUPS
Andreas Schneider [Tue, 26 Jan 2016 10:28:50 +0000 (11:28 +0100)]
waf: Only build smb_krb5_wrapper if we have CUPS

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 192f1516c378ae942d14921bfcc1e11173da36e6)

3 years agos3-client: Add a KRB5 wrapper for smbspool
Andreas Schneider [Tue, 12 Jan 2016 14:17:22 +0000 (15:17 +0100)]
s3-client: Add a KRB5 wrapper for smbspool

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11690

We need a wrapper for smbspool to be able to authenticate with Kerberos.
This needs to replace the cups smb backend. The permission need to be
0700 and the owner root.

Note that Kerberos support is broken in CUPS 2.1.2 maybe earlier
versions. It works with 1.6.3.

Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Jan 25 19:58:46 CET 2016 on sn-devel-144

(cherry picked from commit 62c68bd8c8f7a7e057e38a461707f1c195e62df0)

3 years agos3-parm: clean up defaults when removing global parameters
Alexander Bokovoy [Fri, 22 Jan 2016 09:44:03 +0000 (11:44 +0200)]
s3-parm: clean up defaults when removing global parameters

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11693

When globals are re-initialized, they are cleared and globals' talloc
context is freed. However, parm_table still contains a reference to the
global value in the defaults. This confuses lpcfg_string_free() after
commit 795c543d858b2452f062a02846c2f908fe4cffe4 because it tries to
free already freed pointer which is passed by lp_save_defaults():

....
    case P_STRING:
    case P_USTRING:
                  lpcfg_string_set(Globals.ctx,
                                   &parm_table[i].def.svalue,
                                   *(char **)lp_parm_ptr(NULL, &parm_table[i]));
....

here &parm_table[i].def.svalue is passed to lpcfg_string_free() but it
is a pointer to a value allocated with previous Globals.ctx which
already was freed.

This specifically affects registry backend of smb.conf in lp_load_ex()
where init_globals() called explicitly to re-init globals after
lp_save_defaults() if we have registry backend defined.

Reviewed-by: Uri Simchoni <uri@samba.org>
Signed-off-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Uri Simchoni <uri@samba.org>
Autobuild-Date(master): Mon Jan 25 23:58:42 CET 2016 on sn-devel-144

(cherry picked from commit 500bc01478881cab89f0e691427e34a405bb0003)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Tue Jan 26 12:58:53 CET 2016 on sn-devel-104

3 years agos4:torture: add SMB2 test for directory creation initial allocation size
Ralph Boehme [Wed, 20 Jan 2016 16:46:38 +0000 (17:46 +0100)]
s4:torture: add SMB2 test for directory creation initial allocation size

Test that directory creation with an initial allocation size > 0
succeeds.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11684

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Sun Jan 24 01:20:52 CET 2016 on sn-devel-144

(cherry picked from commit cd86f20e245cc1b0cb3be5d6cb1b45c45e2a45a8)

3 years agos3:smbd: Ignore initial allocation size for directory creation
Ralph Boehme [Wed, 25 Nov 2015 14:23:26 +0000 (15:23 +0100)]
s3:smbd: Ignore initial allocation size for directory creation

We reject directory creation with an initial allocation size > 0 with
NT_STATUS_ACCESS_DENIED. Windows servers ignore the initial allocation
size on directories.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11684

Pair-Programmed-With: Volker Lendecke <vl@samba.org>
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 78ccbb07170c3e49a084d31434310f973e3d6158)

3 years agosmbcacls: fix uninitialized variable
Uri Simchoni [Wed, 20 Jan 2016 07:34:26 +0000 (09:34 +0200)]
smbcacls: fix uninitialized variable

An uninitialized variable causes "numeric" mode to be
used without the -n option.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11682

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Wed Jan 20 12:12:12 CET 2016 on sn-devel-144

(cherry picked from commit 6cff00954763a7b266db5bab229b989e89abcee0)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Jan 21 13:01:16 CET 2016 on sn-devel-104

3 years agoRevert "winbind: Retry after SESSION_EXPIRED error in ping-dc"
Christof Schmitt [Thu, 7 Jan 2016 20:27:49 +0000 (13:27 -0700)]
Revert "winbind: Retry after SESSION_EXPIRED error in ping-dc"

This reverts commit a2670f15dea27c10e3827216adf572f9c3894f85.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

cm_connect_netlogon now handles the retry for an expired session.

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan 13 03:35:57 CET 2016 on sn-devel-144

(cherry picked from commit 6f3656c47d8ae6a3ac10591ffd7a60797775b469)

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Thu Jan 14 13:21:52 CET 2016 on sn-devel-104

3 years agowinbindd: Retry on expired session in cm_connect_netlogon
Christof Schmitt [Tue, 5 Jan 2016 22:10:45 +0000 (15:10 -0700)]
winbindd: Retry on expired session in cm_connect_netlogon

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit aa3883eae6e7891efb1e6f9ec74e6073bee43250)

3 years agowinbindd: Retry on expired session in cm_connect_sam
Christof Schmitt [Thu, 7 Jan 2016 22:03:22 +0000 (15:03 -0700)]
winbindd: Retry on expired session in cm_connect_sam

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 276d604aa5ccc32d18b69c04ae13e2dc7c21f3ee)

3 years agowinbindd: Retry on expired session in cm_connect_lsa
Christof Schmitt [Wed, 6 Jan 2016 21:15:30 +0000 (14:15 -0700)]
winbindd: Retry on expired session in cm_connect_lsa

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 3b6b5456424be6997b32c23b7c149c8060c3102d)

3 years agowinbindd: Remove double retry from some ADS methods
Christof Schmitt [Tue, 5 Jan 2016 21:42:09 +0000 (14:42 -0700)]
winbindd: Remove double retry from some ADS methods

The retry through the new reconnect_ads layer is enough. This structure
also makes the distinction between retry layer and actual methods call a
bit clearer.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 4c6804e414087fb61e66133cefbe5590d1d9b283)

3 years agowinbindd: Add retry also for ADS method calls
Christof Schmitt [Tue, 5 Jan 2016 21:37:30 +0000 (14:37 -0700)]
winbindd: Add retry also for ADS method calls

RPC calls can return IO_DEVICE_ERROR on expired SMB2 sessions. Retrying
on a new connection avoids surfacing this error to winbindd clients.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit e4adf55e242aa5f000570bf554fcd15d7e86c126)

3 years agowinbindd: Reset connection for expired session before reconnecting
Christof Schmitt [Tue, 5 Jan 2016 20:39:25 +0000 (13:39 -0700)]
winbindd: Reset connection for expired session before reconnecting

A RPC call on a expired SMB2 session returns IO_DEVICE_ERROR. In this
case, reset the connection before issuing the same call
again.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11670

Signed-off-by: Christof Schmitt <cs@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit fb5b0cec3c0c2e0cf9cb04f8b52ee910ac245aeb)

3 years agovfs_shadow_copy2: add a blackbox test suite
Uri Simchoni [Thu, 29 Oct 2015 20:24:30 +0000 (22:24 +0200)]
vfs_shadow_copy2: add a blackbox test suite

Add a blackbox test suite for vfs_shadow_copy2, testing
parameters mountpoint, basedir, snapdir, snapdirseverywhere,
and testing correct wide-link processing.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Wed Jan 13 17:11:38 CET 2016 on sn-devel-144

(cherry picked from commit 7362c27a62e3802fc8df975ce50115b683811f4a)

3 years agovfs_shadow_copy2: fix case where snapshots are outside the share
Uri Simchoni [Mon, 2 Nov 2015 07:08:53 +0000 (09:08 +0200)]
vfs_shadow_copy2: fix case where snapshots are outside the share

Adjust the connect path to the root of the share in the snapshot,
or to the root of the snapshot if the snapshot is "inside" the
share.

This way snapshot symlink regarded as "wide links" if and only if
they point outside the snapshot or they were wide links when
the snapshot was taken.

This allows mounting the snapshots outside the share's root.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 8a49a63a5a5d8014d32179df1789186223443b35)

3 years agovfs_shadow_copy2: add shadow_copy2_do_convert()
Uri Simchoni [Sun, 1 Nov 2015 20:28:46 +0000 (22:28 +0200)]
vfs_shadow_copy2: add shadow_copy2_do_convert()

Add a new routine shadow_copy2_do_convert() which is
like shadow_copy2_convert(), but beside calculating the
path of the snapshot file, it also returns the minimum length
of the subpath which is both inside the share and inside the
same snapshot as the file in question, i.e. (at least in the
classical case) the subdirectory of the the snapshot file's
snapshot directory that corresponds to the file's share root.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11580

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 3703bca4d9e494aec0b40243add3e076cf353601)

3 years agos3:smbd/oplock obey kernel oplock setting when releasing oplocks
Christian Ambach [Mon, 4 Jan 2016 22:12:25 +0000 (23:12 +0100)]
s3:smbd/oplock obey kernel oplock setting when releasing oplocks

otherwise smbd asks the kernel to release an oplock that was never requested

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11400

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan  6 08:58:56 CET 2016 on sn-devel-144

(cherry picked from commit eda6aaf1533b69d093ba67ff5e22fcda0073dd3f)

3 years agoselftest: more dfree command and smbclient disk usage tests
Uri Simchoni [Tue, 5 Jan 2016 22:12:36 +0000 (00:12 +0200)]
selftest: more dfree command and smbclient disk usage tests

Add tests that cover disk usage printing by smbclient, as well
as passing directory info to the "dfree command" script.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11662

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jan  6 03:58:59 CET 2016 on sn-devel-144

(cherry picked from commit 3e1b26bd6d0998c3af3d77f94eaac469434389be)

3 years agosmbclient: query disk usage relative to current directory
Uri Simchoni [Tue, 5 Jan 2016 22:08:25 +0000 (00:08 +0200)]
smbclient: query disk usage relative to current directory

When querying disk usage in the "dir" and "du" commands,
use the current directory. This behavior is compatible
with Windows command shell "dir" command.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11662

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 275da6c5c7e7c5dd0581e919912eb82102903a46)

3 years agoVERSION: Bump version up to 4.3.5...
Karolin Seeger [Mon, 11 Jan 2016 09:59:43 +0000 (10:59 +0100)]
VERSION: Bump version up to 4.3.5...

and re-enable git snapshots.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Mon Jan 11 14:23:41 CET 2016 on sn-devel-104

3 years agoVERSION: Disable git snapshots for the 4.3.4 release.
Karolin Seeger [Mon, 11 Jan 2016 09:59:07 +0000 (10:59 +0100)]
VERSION: Disable git snapshots for the 4.3.4 release.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
3 years agoWHATSNEW: Add release notes for Samba 4.3.4.
Karolin Seeger [Mon, 11 Jan 2016 09:57:06 +0000 (10:57 +0100)]
WHATSNEW: Add release notes for Samba 4.3.4.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
3 years agos3:torture: add traverse testing to LOCAL-RBTREE
Stefan Metzmacher [Tue, 24 Nov 2015 23:13:17 +0000 (00:13 +0100)]
s3:torture: add traverse testing to LOCAL-RBTREE

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Fri Nov 27 13:16:59 CET 2015 on sn-devel-104

(cherry picked from commit bb9f13ab4165f150e01a88ddcc51605a7c176f5d)

3 years agodbwrap_rbt: fix modifying the db during traverse
Stefan Metzmacher [Wed, 25 Nov 2015 08:22:08 +0000 (09:22 +0100)]
dbwrap_rbt: fix modifying the db during traverse

We delete and add of records rebalace the tree, but our
traverse code doesn't handle that and skips records
randomly.

We maintain records in a linked list for now
in addition to the rbtree and use that list during
traverse.

This add a bit overhead, but at least it works reliable.
If someone finds a way to do reliable traverse with the
rebalanced tree, we can replace this commit.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 0f46da08e160e6712e5282af14e1ec4012614fc7)

3 years agodbwrap_rbt: add nested traverse protection
Stefan Metzmacher [Wed, 25 Nov 2015 08:22:08 +0000 (09:22 +0100)]
dbwrap_rbt: add nested traverse protection

Multiple dbwrap_traverse_read() calls are possible.

store() and delete() on a fetch locked record
are rejected during dbwrap_traverse_read().

A dbwrap_traverse() within a dbwrap_traverse_read()
behaves like a dbwrap_traverse_read().

Nested dbwrap_traverse() calls are not possible.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 590507951fc514a679f44b8bfdd03c721189c3fa)

3 years agodbwrap_rbt: use talloc_zero_size() instead of a partial ZERO_STRUCT()
Stefan Metzmacher [Wed, 25 Nov 2015 09:17:34 +0000 (10:17 +0100)]
dbwrap_rbt: use talloc_zero_size() instead of a partial ZERO_STRUCT()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11375
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11394

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit f3d1fc1d06822a951a2a3eeb5aa53748b9b5b299)

3 years agoRevert "Fix bug #11394 - Crash: Bad talloc magic value - access after free"
Karolin Seeger [Mon, 11 Jan 2016 10:15:19 +0000 (11:15 +0100)]
Revert "Fix bug #11394 -  Crash: Bad talloc magic value - access after free"

This reverts commit 569ce95de57511d6082196ca4cc0938d78700351.

This has been committed by accident. Right patchset, but wrong authorship.
Patchset with correct authorship to follow.

3 years agoAdd dependency on libtevent-dev in samba-dev.
Jelmer Vernooij [Sat, 9 Jan 2016 20:20:06 +0000 (20:20 +0000)]
Add dependency on libtevent-dev in samba-dev.

3 years agopassword_lockout: test creds.get_kerberos_state()
Douglas Bagnall [Tue, 1 Dec 2015 00:48:59 +0000 (13:48 +1300)]
password_lockout: test creds.get_kerberos_state()

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Garming Sam <garming@samba.org>
Autobuild-Date(master): Tue Dec 15 03:17:52 CET 2015 on sn-devel-104

(cherry picked from commit ab1ebb1d1c650396841e4ba4a18b3c08689d4f52)

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11659
lastLogon and lastLogonTimestamp are not updated

Autobuild-User(v4-3-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-3-test): Wed Jan  6 13:14:21 CET 2016 on sn-devel-104

3 years agoauth: keep track of lastLogon and lastLogonTimestamp
Douglas Bagnall [Fri, 23 Oct 2015 03:57:56 +0000 (16:57 +1300)]
auth: keep track of lastLogon and lastLogonTimestamp

lastLogon is supposed to be updated for every interactive or kerberos
login, and (according to testing against Windows2012r2) when the bad
password count is non-zero but the lockout time is zero. It is not
replicated.

lastLogonTimestamp is updated if the old value is more than 14 -
random.choice([0, 1, 2, 3, 4, 5]) days old, and it is replicated. The
14 in this calculation is the default, stored as
"msDS-LogonTimeSyncInterval", which we offer no interface for
changing.

The authsam_zero_bad_pwd_count() function is a convenient place to
update these values, as it is called upon a successful logon however
that logon is performed. That makes the function's name inaccurate, so
we rename it authsam_logon_success_accounting(). It also needs to be
told whet5her the login is interactive.

The password_lockout tests are extended to test lastLogon and
lasLogonTimestamp.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit 795f4729ca94029fcee750fbebbe9bc3ea43a214)

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11659
lastLogon and lastLogonTimestamp are not updated