samba.git/source4/rpc_server/lsa, branch master

Fix the developer O3 build

2015-02-25T15:32:29+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Wed Feb 25 16:32:29 CET 2015 on sn-devel-104

s4:rpc_server/lsa: add dcesrv_lsa_OpenTrustedDomain_common()

2015-01-26T10:55:07+00:00

dcesrv_lsa_OpenTrustedDomain() and dcesrv_lsa_OpenTrustedDomainByName()
need to use the same logic and make sure trusted_domain_user_dn is valid.

Otherwise dcesrv_lsa_OpenTrustedDomainByName() followed by
dcesrv_lsa_DeleteObject() will leave the trust domain account
in the database.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider 
Reviewed-by: Günther Deschner

CVE-2014-8143:dsdb-samldb: Check for extended access rights before we allow changes to userAccountControl

2015-01-15T13:54:47+00:00

This requires an additional control to be used in the
LSA server to add domain trust account objects.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10993

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Karolin Seeger 
Autobuild-Date(master): Thu Jan 15 14:54:47 CET 2015 on sn-devel-104

s4:rpc_server/lsa: remove msDS-TrustForestTrustInfo if FOREST_TRANSITIVE is cleared

2015-01-06T21:50:23+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Simo Sorce 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Tue Jan  6 22:50:23 CET 2015 on sn-devel-104

s4:rpc_server/lsa: allow LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE to be changed.

2015-01-06T19:25:04+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Simo Sorce

s4:rpc_server/lsa: fix segfault in check_ft_info()

2014-12-19T12:15:13+00:00

This is triggered by lsa_lsaRSetForestTrustInformation()
with ForestTrustInfo elements using FOREST_TRUST_TOP_LEVEL_NAME.

The nb_name variable was uninitialized and dereferenced without checking.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Günther Deschner

s4:rpc_server/lsa: remove trustAuthIncoming/trustAuthOutgoing when the related flag is removed.

2014-12-19T12:15:13+00:00

When LSA_TRUST_DIRECTION_INBOUND or LSA_TRUST_DIRECTION_OUTBOUND flags is cleared
we should also remove the related credentials.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Günther Deschner

s4:rpc_server/lsa: pass the correct variable to setInfoTrustedDomain_base()

2014-12-19T12:15:13+00:00

This requires 'struct lsa_policy_state', we now pass this directly
instead of a instead of an opaque 'struct dcesrv_handle'.

dcesrv_lsa_SetInformationTrustedDomain() passes in a 'struct dcesrv_handle'
with 'struct lsa_trusted_domain_state' before, which results in segfaults.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Günther Deschner

idl: Merge NETR_TRUST and LSA_TRUST definitions into one set only in lsa.idl

2014-09-26T23:35:36+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

kerberos: Remove un-used event context argument from smb_krb5_init_context()

2014-04-28T00:24:57+00:00

The event context here was only specified in the server or admin-tool
context, which does not do network communication, so this only caused
a talloc_reference() and never any useful result.

The actual network communication code sets an event context directly
before making the network call.

Andrew Bartlett

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Mon Apr 28 02:24:57 CEST 2014 on sn-devel-104