[Pkg-samba-maint] [Git][samba-team/samba][debian_4.21] 89 commits: VERSION: Bump version up to Samba 4.21.7...

Michael Tokarev (@mjt) gitlab at salsa.debian.org
Mon Jul 7 21:41:36 BST 2025



Michael Tokarev pushed to branch debian_4.21 at Debian Samba Team / samba


Commits:
a3e57f9d by Jule Anger at 2025-06-03T08:45:52+02:00
VERSION: Bump version up to Samba 4.21.7...

and re-enable GIT_SNAPSHOT.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
27b0b2c2 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
librpc/rpc: map DCERPC_NCA_S_SERVER_TOO_BUSY to NT_STATUS_RPC_SERVER_TOO_BUSY

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 722e93e4d9ace010e44cc041e6614ce5b71265d8)

- - - - -
a91f4b27 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
librpc/rpc: map DCERPC_NCA_S_UNSUPPORTED_TYPE to NT_STATUS_RPC_UNSUPPORTED_TYPE

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 492f6a0eef7e7c64806ac9137c18a76fd116766d)

- - - - -
59c53541 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:torture/rpc: avoid checking p->last_fault_code in iremotewinspool*

Now that we check for NT_STATUS_RPC_UNSUPPORTED_TYPE, there's no
need to check for DCERPC_NCA_S_UNSUPPORTED_TYPE.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit b0be3c8af8240cfb7bc0b63fb7bf73f0f1655e4e)

- - - - -
5047e986 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:torture/rpc: remove useless usage of DCERPC_SIGN, DCERPC_SEAL

We already used DCERPC_AUTH_LEVEL_PRIVACY for the connection.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 136ee756fe3a41f863c2d1d538ad029bfe54e1d1)

- - - - -
b7cd9cf0 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:torture/rpc: avoid using DCERPC_NDR_REF_ALLOC in fsrvp.c

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 061267e0e4de5c6379205a09376ec21374a87a3d)

- - - - -
c4990ed5 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
librpc/rpc: add dcerpc_binding_handle_transport_{encrypted,session_key}()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 3dc3f9cf1b6fc47baea329863e31ff140cf89550)

- - - - -
f596c495 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:librpc/rpc: add dcerpc_bh_transport_{encrypted,session_key}()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 9b50ab08c16c197291835c8e66cd064ca0bb6579)

- - - - -
30134801 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpc_client: add rpccli_bh_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 5bb35cc7cca101390e58256e9b38e31113211e4f)

- - - - -
7e5ac988 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:pyrpc: let py_iface_transport_encrypted() use dcerpc_binding_handle_transport_encrypted()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 9567d753ac0fcffb50f3710f3329334afb7595cd)

- - - - -
b1be2bb1 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:librpc/rpc: remove unused dcerpc_transport_encrypted()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 3cc6ddeb589f0357c436d1caa70130f053ddcba0)

- - - - -
0b5624e5 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:libnet: add struct dcerpc_binding_handle helper variables in libnet_passwd.c

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 2d1c182bf512666606b8192b2021d571a47d2f58)

- - - - -
9aa2be36 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:libnet: make use of dcerpc_binding_handle_transport_session_key() in libnet_passwd.c

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 93e8d58736e53d8d360ef2ee40f1619bd917c054)

- - - - -
1fe021a0 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
xss4:pyrpc: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 57905603e066e2d1ca60268b1b1e8166868d60e5)

- - - - -
21882dae by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:torture/rpc: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 4ccd2dd8a2f78bcd53c047889b8043e8d95a6d55)

- - - - -
a835a9b2 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:librpc/rpc: remove unused dcerpc_fetch_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit d9bf23f971dd8f426424f05076e76be587d42087)

- - - - -
ece818eb by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
librpc/rpc: add dcerpc_binding_handle_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 5e34173041eb04e30f3f6f81a3269d621220b09c)

- - - - -
0c0f8312 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:librpc/rpc: add dcerpc_bh_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 64467157479c04cb4bafa6c4ec19213009f0643f)

- - - - -
2b7ae6f6 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpc_client: add rpccli_bh_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit af16ecece870846323956c37d3e15abe24e336fd)

- - - - -
7fae08c9 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:drepl: make use of dcerpc_binding_handle_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 51f5eefcd119b5981281924a45380d99f9158a88)

- - - - -
37768515 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:libnet: make use of dcerpc_binding_handle_auth_session_key() in libnet_become_dc.c

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit bf888b59e34169e1f6b9fd1d211cb8ff973cf333)

- - - - -
dd0c6b46 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:py_net: make use of dcerpc_binding_handle_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 5d3faa86fd47d6bc887e182f3eb5a51144339549)

- - - - -
c1875485 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:pyrpc: make use of dcerpc_binding_handle_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 38874d28404f49a075bab71fb7357d266173791a)

- - - - -
c924b442 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s4:torture/drs: make use of dcerpc_binding_handle_auth_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit bbe529a2f6090d2b9df0f361aee9b0a28523cefe)

- - - - -
7092b9ab by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:lib/netapi: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 2cb726e92c819d60509419a33cd8da265e1c99e7)

- - - - -
505775ba by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:libnet_join: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 56175a0947fbb56d151fca057cf9696d55ea5d82)

- - - - -
5f1f651d by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:utils/net_rpc: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit a14ac349deca11cda4159266cb3119fb3024999c)

- - - - -
8c695f13 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpc_client: make use of dcerpc_binding_handle_transport_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 77da0914d5cccd7116ca3b6f75cb4d0cd0107239)

- - - - -
3200bd21 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:libnet_dssync: make use of dcerpc_binding_handle_auth_session_key()

Note we only need to call this once per connection, not after
each request...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 099c8d904ece0edbefecbaa51fa50256fd2ea7c0)

- - - - -
95f71529 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpcclient/cli_drsuapi: make use of dcerpc_binding_handle_auth_session_key()

Note we only need to call this once per connection, not after
each request...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit f75189dee9db486d393cd17c25f5a84ce2d0b889)

- - - - -
b640002a by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpc_client: remove unused cli_get_session_key()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 3a3338bd184e3c51eab48fb1a03b1b3e749f2dc6)

- - - - -
277f9ff9 by Stefan Metzmacher at 2025-06-12T11:27:14+00:00
s3:rpc_client: the transport_session_key is per connection!

It's not per auth_context_id, currently there's no difference
but that will change in future...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 1a311df3d61d3f3dbb986cc35470df6445802ff6)

- - - - -
1ff49833 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpcclient: make use of dcerpc_binding_handle_auth_info()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 8dcbbebe56d3dad3650eca79322150e9d397e227)

- - - - -
3db4cfe8 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:winbindd: cm_connect_lsa_tcp() doesn't need to check for NCACN_IP_TCP or LEVEL_INTEGRITY

We only ever create domain->lsa_pipe_tcp with
cli_rpc_pipe_open_schannel_with_creds() and hardcoded NCACN_IP_TCP.

And schannel_update_internal returns an error with
an auth level lower than DCERPC_AUTH_LEVEL_INTEGRITY.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 61d38f70be378c59b42a6e20e7d49fea21255c6b)

- - - - -
daefb7b2 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: make use of struct samba_sockaddr in rpc_pipe_open_ncalrpc()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit d406f9fffede27220f4d589c8ab3c7210ca01b74)

- - - - -
3731bbfd by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: header signing is negotiated per transport connection

All gensec backends support GENSEC_FEATURE_SIGN_PKT_HEADER, so there's
no point in negotiating header signing based on the
auth context used during the DCERPC Bind.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 72b79a771fdbf54aa73b4c1b0372b9dffd81bfa6)

- - - - -
20a42d2c by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
librpc/rpc: add get_binding() to dcerpc_binding_handle_ops

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 1adf226e74375b2fb0932380f13bf19d8d856ea4)

- - - - -
51dc661d by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
libcli/tstream_binding_handle: implement get_binding()

We just create an dummy binding handle here
as it's not really dcerpc...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 66411b96b88fbb7b405efa87015e4af1f2988fad)

- - - - -
296b5cd0 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:lib/messaging: implement irpc_bh_get_binding()

We just use NCACN_INTERNAL here...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit a6034592faf0676532c97a79b9c542bcd2de9537)

- - - - -
a89c2664 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:winbindd: implement wbint_bh_get_binding() in winbindd_dual_ndr.c

We use NCACN_INTERNAL here too...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 8c2aa56c7003e690252dfb05f78fd083c0c13dab)

- - - - -
d2d951bd by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:librpc/rpc: call dcerpc_binding_set_abstract_syntax after bind or alter context

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit e8d59ca3361bcdaf4db729eeb4a71f714bd9feda)

- - - - -
1ed6f5c6 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:librpc/rpc: implement dcerpc_bh_get_binding()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 0ef5d79eb6feefa2b7c5821ced98773d6d8fdd3a)

- - - - -
bac92828 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: implement rpccli_bh_get_binding()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit fffc6e0f37a2d6a6612e17ad6fa777ae6a8eb3b6)

- - - - -
e94025e1 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
librpc/rpc: add dcerpc_binding_handle_get_binding()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit a038e7d8cf7a93ecf9a3e0c906f0d0db81ecee54)

- - - - -
57d161d5 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
librpc/rpc: add dcerpc_binding_handle_get_transport() helper function

This will allow callers to avoid the dcerpc_binding_handle_get_binding()
dcerpc_binding_get_transport() dance...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 0e751215b349e10cc796065d6d01de35f52b41fd)

- - - - -
2edaf617 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
librpc/rpc: un-const dcerpc_default_transport_endpoint()

It returns an alloced string so it should not be marked as
const...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 9fe85a93539adb73ae59247d044746073915684a)

- - - - -
5e2606c5 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:libnet: make use of dcerpc_binding_handle_get_binding()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit ad20c6656aa6798541b71b172534054c172d3aa5)

- - - - -
2ca22d00 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:libnet: make use of dcerpc_binding_handle_get_transport()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit a4b1845f4c5202afedd65b9d0db2866de75420a5)

- - - - -
087ccbdd by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:torture/rpc: make use of dcerpc_binding_handle_get_binding() and dcerpc_binding_get_flags()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 7ed9867fa82ae61a4522a724580900adce7e2bb5)

- - - - -
a57ec731 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:tortore/rpc: make use of dcerpc_binding_get_abstract_syntax() and dcerpc_binding_get_flags()

We should not use p->syntax nor p->transfer_syntax...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 1713ad96a42e9245697a29d4899924cfbf636fc5)

- - - - -
ba777ee0 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:torture/rpc: make use of dcerpc_binding_handle_get_transport()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 382ece66063bd8ef465e989857394e6f412df6d3)

- - - - -
91e8d63c by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s4:librpc: make all but dcerpc_pipe->binding_handle internal struct members

We could use a dcerpc_internal.h for struct dcecli_security and
struct dcecli_connection, but in struct dcerpc_pipe we still
expose binding_handle and changing that would require way too
much work for now...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 353af4b70559be1665df345655af43a61177c710)

- - - - -
2f753ed8 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: remember rpc_pipe_client->print_username

This is ugly, but it's less ugly than doing it deep
inside of cli_spoolss.c and other code.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 344e45507e122137c357fc177bb024f09fff8b01)

- - - - -
86e27e94 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: remove references to rpc_pipe_client from wsp_cli.c

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit dc6d3c96c33797163ac578675b255872deca9b98)

- - - - -
523484d1 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:winbindd: make use of dcerpc_binding_handle_get_transport()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 504906e60f9a09518202397f0aa0782242dbe3bb)

- - - - -
61a5a72a by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpcclient: make use of dcerpc_binding_handle_get_transport()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit e5c09e041d1517649616d0d4b072422802a69f08)

- - - - -
33b0b4bf by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:lib/netapi: make use of dcerpc_binding_get_abstract_syntax()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit fe94230f7ebedfdcc5f087b442ee91d9c44b734f)

- - - - -
6af9f503 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:libsmb: make use of dcerpc_binding_get_abstract_syntax()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 8d666e18f8d254124967e7ac56fc5b171963c02f)

- - - - -
6c43234a by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:librpc/rpc: split out dcerpc_internal.h for struct pipe_auth_data

This should be anonymous for callers.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit b874619b5ed5d29a939f13d8064a47c8aca45b8c)

- - - - -
7e02cf06 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: make most of rpc_pipe_client internal struct members

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit ae88941c8a2e4e9c7d0deb9c39dcbb2f9fab0ebb)

- - - - -
e42835a2 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: only pass the pipe_name to rpc_transport_np_init_send()

There's no need to have the ndr_interface_table at that stage...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 5b3573135b222755cd897d4539c0e5a89f7cdf5b)

- - - - -
8dc83405 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: add struct rpc_client_{association,connection} and helpers

They will be every useful for NCACN_NP and NCACN_IP_TCP,
so that we can support alter_context or more than one connection
per association group.

We mark the helpers as _UNUSED_ for now in order to compile...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 327fe920d07e5bcbcaa0f09f276aad2b99d68235)

- - - - -
6f67e05f by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: convert rpc_pipe_open_ncalrpc() to rpc_client_{association,connection}

For rpc_pipe_open_ncalrpc() it's not really important to abstract these
out, but we want to have these for all...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 5e9c2ebb37b276d7c90b4cc8397c4853f62aa189)

- - - - -
f81ee3b6 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: convert rpc_pipe_open_local_np() to rpc_client_{association,connection}

For rpc_pipe_open_local_np() it's not really important to abstract
these out, but we want to have these for all...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 338dd71cc39195fcf25977b40b9772775972bc9f)

- - - - -
f019fa98 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: convert rpc_pipe_open_tcp_port() to rpc_client_{association,connection}

Note that cli_rpc_pipe_open() calls rpc_client_association_create()
without a need for NCACN_NP, but that will change in the next commits...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 637a8e5270fefaea5c61921d4b6ecfc4455a91aa)

- - - - -
4b1f27c3 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: convert rpc_pipe_open_np() to rpc_client_{association,connection}

This split out rpc_client_connection_np_send/recv, which will
be used as shortcut in a later commit.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 7b9cef2a29333c6338520754927ee37027738010)

- - - - -
cb3e074e by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: let cli_rpc_pipe_open() use rpc_client_connection_np()

This way cli_rpc_pipe_open() uses the same flow for
rpc_client_connection_np() and rpc_pipe_open_tcp_port().

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit fab0d27c5cf4885c31d7ed04ea69eda7992ea209)

- - - - -
75e1c18d by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: make real use of rpc_client_{association,connection}

This will allow NCACN_NP and NCACN_IP_TCP to support
alter_context with security context multiplexing
or otherwise more than one connection per association group.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 899c9f2d6836c3b63acb6f261690c087e287afde)

- - - - -
bf717ca5 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: add cli_rpc_pipe_client_prepare_alter() helper

This will allow to do an alter context if security context multiplexing
is negotiated or opening a new connection in the same association group.

The old connection will be kept open, but not used anymore...

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit dd7980841593d18081216e6eb3e1b0fb9bd9c757)

- - - - -
4ead8424 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: split out cli_rpc_pipe_client_auth_schannel()

This will allow us to use it without creating a new
association group and transport connection.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit 14fe854ec5379c422e805cde6ed6290f86ad66db)

- - - - -
e568b119 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: add missing TALLOC_FREE(frame) in cli_rpc_pipe_open()

This was missing in commit 637a8e5270fefaea5c61921d4b6ecfc4455a91aa.

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Volker Lendecke <vl at samba.org>
(cherry picked from commit c3222192a40a2b1608c9c48f0352cb6f18f26d79)

- - - - -
22900d27 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: remember the local/remote ipv4 or ipv6 addresses

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit b6123197d13b5350b8fc88e9c8d59f0f05c3aed6)

- - - - -
1ba2acc9 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:cli_pipe: pass target_service to cli_rpc_pipe_open_with_creds()

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>

- - - - -
fe5b8928 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: Add cli_rpc_pipe_reopen_np_noauth()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit d2ac6221db48b93581d7ce48d31f8851c88b77bc)
(cherry picked from commit 60dc107d2a6154bf3254218e10b91c2a91ee88d9)

- - - - -
4ae32d6f by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_cerver: Use dcerpc_lsa_open_policy3() for internal RPC

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 0c68d9bc0cd5873f7b59be0fe93d64d6d47b5a57)
(cherry picked from commit d0420684649383ffbd309d23c69a0bf8a051fc06)

- - - - -
1cbbe562 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
s3:rpc_client: Use cli_rpc_pipe_reopen_np_noauth() for OpenPolicy fallback

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 3bbe35d42c4d4a0ce663580dfb035b6beb329ebb)
(cherry picked from commit 1a3be37e0eb564604b20c5d2ab1842661d466433)

- - - - -
30b077b6 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
dcesrv_core: Make dcesrv_call_disconnect_after() public

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit a094a29e426cc79e23bb4d866334d7735159fb41)
(cherry picked from commit 310b5c9dcecfba72b3b02632fca08a68c042d2c1)

- - - - -
0a0d87f4 by Stefan Metzmacher at 2025-06-12T11:27:15+00:00
librpc:pyrpc: Allow new authenticated rpc connection on the same transport as the basis_connection

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
(cherry picked from commit 2c171fb1b8c88034a98c3aaf052e99ba5dbbafd9)
(cherry picked from commit 82aa83142598f99d662fb9f16aa20c5e2f5fafa5)

- - - - -
e8e6b685 by Andreas Schneider at 2025-06-12T11:27:15+00:00
pidl: Update documentation for DCERPC interface connections

https://realpython.com/documenting-python-code/

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from commit 73ce15e7d5b7ea867849f1aa4fa5390830660f11)
(cherry picked from commit 1f84f56c6df0813e488701704daf2174bd0f7eb3)

- - - - -
b106c7d7 by Andreas Schneider at 2025-06-12T11:27:15+00:00
python:lsa_utils: Don't use optional arguments for OpenPolicyFallback()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from commit f9a3fc19f1e212c54351c3f94978e66fceeb8835)
(cherry picked from commit 8a7346f6c03dd4f5e8394997e1d118d33c950c35)

- - - - -
ccb5e969 by Stefan Metzmacher at 2025-06-12T12:40:31+00:00
python:lsa_utils: Fix fallback to OpenPolicy2

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15680

Pair-Programmed-With: Andreas Schneider <asn at samba.org>
Signed-off-by: Andreas Schneider <asn at samba.org>
Signed-off-by: Stefan Metzmacher <metze at samba.org>

Autobuild-User(master): Andreas Schneider <asn at cryptomilk.org>
Autobuild-Date(master): Mon Feb 17 18:33:15 UTC 2025 on atb-devel-224

(cherry picked from commit a814f5d90a3fb85a94c9516dba224037e8fd76f1)

Autobuild-User(v4-22-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-22-test): Thu Feb 20 11:22:18 UTC 2025 on atb-devel-224

(cherry picked from commit 29bd6fe9cbe538b267bf0ed66823cfe8599afb3d)

Autobuild-User(v4-21-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-21-test): Thu Jun 12 12:40:31 UTC 2025 on atb-devel-224

- - - - -
3490e763 by Andreas Schneider at 2025-06-26T14:28:11+00:00
lib:util: Disable logging to syslog for startup messages

D_ERR also is sent to syslog!

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15869

Signed-off-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Gary Lockyer <gary at catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall at catalyst.net.nz>

Autobuild-User(master): Andreas Schneider <asn at cryptomilk.org>
Autobuild-Date(master): Wed Jun 18 12:10:03 UTC 2025 on atb-devel-224

(cherry picked from commit 58c64ba25adb1c1d272ba196529b5465ae7ee9df)

Autobuild-User(v4-21-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-21-test): Thu Jun 26 14:28:11 UTC 2025 on atb-devel-224

- - - - -
fc13e091 by Stefan Metzmacher at 2025-07-07T14:14:13+00:00
s3:winbindd: avoid using any netlogon call to get a dc name

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15876

Signed-off-by: Stefan Metzmacher <metze at samba.org>
Reviewed-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>
(cherry picked from commit f86a4bf6848ade2db7229d182576db3320c3ece7)

- - - - -
1967ce81 by Günther Deschner at 2025-07-07T15:42:19+00:00
s3-winbindd: Fix internal winbind dsgetdcname calls w.r.t. domain name

when winbind calls to dsgetdcname internally, make sure to
prefer the DNS domain name if we have it. Makes DNS lookups much more
likely to succeed.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15876

Guenther

Signed-off-by: Guenther Deschner <gd at samba.org>
Reviewed-by: Andreas Schneider <asn at samba.org>
Reviewed-by: Ralph Boehme <slow at samba.org>

Autobuild-User(master): Ralph Böhme <slow at samba.org>
Autobuild-Date(master): Mon Jul  7 10:44:37 UTC 2025 on atb-devel-224

(cherry picked from commit 2560c9b3224816ffd371a62103f65b3aca301ad5)

Autobuild-User(v4-21-test): Jule Anger <janger at samba.org>
Autobuild-Date(v4-21-test): Mon Jul  7 15:42:19 UTC 2025 on atb-devel-224

- - - - -
19f7837e by Jule Anger at 2025-07-07T18:07:36+02:00
WHATSNEW: Add release notes for Samba 4.21.7.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
5da3e988 by Jule Anger at 2025-07-07T18:08:04+02:00
VERSION: Disable GIT_SNAPSHOT for the 4.21.7 release.

Signed-off-by: Jule Anger <janger at samba.org>

- - - - -
e4d431ea by Michael Tokarev at 2025-07-07T23:34:46+03:00
New upstream version 4.21.7+dfsg
- - - - -
4b5d66f2 by Michael Tokarev at 2025-07-07T23:36:16+03:00
Update upstream source from tag 'upstream/4.21.7+dfsg'

Update to upstream version '4.21.7+dfsg'
with Debian dir 4be8017e77613ee0078b467b1411be541f8944d5
- - - - -
bd39bfe3 by Michael Tokarev at 2025-07-07T23:39:03+03:00
update changelog; upload version 4.21.7+dfsg-1 to unstable

- - - - -


104 changed files:

- VERSION
- WHATSNEW.txt
- debian/changelog
- lib/util/debug.c
- lib/util/debug.h
- libcli/tstream_binding_handle/tstream_binding_handle.c
- librpc/rpc/binding_handle.c
- librpc/rpc/dcerpc_error.c
- librpc/rpc/dcerpc_util.c
- librpc/rpc/dcerpc_util.h
- librpc/rpc/dcesrv_core.c
- librpc/rpc/dcesrv_core.h
- librpc/rpc/rpc_common.h
- pidl/lib/Parse/Pidl/Samba4/Python.pm
- python/samba/lsa_utils.py
- python/samba/netcmd/domain/trust.py
- python/samba/tests/dcerpc/lsa_utils.py
- source3/lib/netapi/cm.c
- source3/lib/netapi/joindomain.c
- source3/lib/netapi/localgroup.c
- source3/lib/netapi/user.c
- source3/libnet/libnet_dssync.c
- source3/libnet/libnet_join.c
- source3/librpc/rpc/dcerpc.h
- source3/librpc/rpc/dcerpc_helpers.c
- + source3/librpc/rpc/dcerpc_internal.h
- source3/libsmb/libsmb_xattr.c
- source3/libsmb/passchange.c
- source3/rpc_client/cli_lsarpc.c
- source3/rpc_client/cli_lsarpc.h
- source3/rpc_client/cli_pipe.c
- source3/rpc_client/cli_pipe.h
- source3/rpc_client/cli_spoolss.c
- source3/rpc_client/rpc_client.h
- source3/rpc_client/rpc_transport.h
- source3/rpc_client/rpc_transport_np.c
- source3/rpc_client/wsp_cli.c
- source3/rpc_server/netlogon/srv_netlog_nt.c
- source3/rpcclient/cmd_drsuapi.c
- source3/rpcclient/cmd_iremotewinspool.c
- source3/rpcclient/cmd_lsarpc.c
- source3/rpcclient/cmd_samr.c
- source3/rpcclient/rpcclient.c
- source3/utils/net_rpc.c
- source3/utils/net_rpc_printer.c
- source3/utils/net_rpc_rights.c
- source3/utils/net_rpc_trust.c
- source3/winbindd/wb_queryuser.c
- source3/winbindd/wb_sids2xids.c
- source3/winbindd/wb_xids2sids.c
- source3/winbindd/winbindd_cm.c
- source3/winbindd/winbindd_dual.c
- source3/winbindd/winbindd_dual_ndr.c
- source3/winbindd/winbindd_dual_srv.c
- source3/winbindd/winbindd_msrpc.c
- source3/winbindd/winbindd_proto.h
- source3/winbindd/winbindd_rpc.c
- source3/winbindd/winbindd_util.c
- source3/wscript_build
- source4/dsdb/repl/drepl_out_helpers.c
- source4/lib/messaging/messaging.c
- source4/libnet/libnet_become_dc.c
- source4/libnet/libnet_join.c
- source4/libnet/libnet_passwd.c
- source4/libnet/libnet_rpc.c
- source4/libnet/py_net.c
- source4/librpc/rpc/dcerpc.c
- source4/librpc/rpc/dcerpc.h
- source4/librpc/rpc/dcerpc_auth.c
- source4/librpc/rpc/dcerpc_connect.c
- source4/librpc/rpc/dcerpc_roh.c
- source4/librpc/rpc/dcerpc_schannel.c
- source4/librpc/rpc/dcerpc_secondary.c
- source4/librpc/rpc/dcerpc_smb.c
- source4/librpc/rpc/dcerpc_sock.c
- source4/librpc/rpc/dcerpc_util.c
- source4/librpc/rpc/pyrpc.c
- source4/librpc/rpc/pyrpc_util.c
- source4/rpc_server/remote/dcesrv_remote.c
- source4/torture/drs/rpc/dssync.c
- source4/torture/drs/rpc/msds_intid.c
- source4/torture/rpc/alter_context.c
- source4/torture/rpc/backupkey.c
- source4/torture/rpc/bind.c
- source4/torture/rpc/drsuapi.c
- source4/torture/rpc/dsgetinfo.c
- source4/torture/rpc/echo.c
- source4/torture/rpc/forest_trust.c
- source4/torture/rpc/fsrvp.c
- source4/torture/rpc/handles.c
- source4/torture/rpc/iremotewinspool.c
- source4/torture/rpc/iremotewinspool_common.c
- source4/torture/rpc/iremotewinspool_common.h
- source4/torture/rpc/lsa.c
- source4/torture/rpc/lsa_lookup.c
- source4/torture/rpc/netlogon.c
- source4/torture/rpc/samba3rpc.c
- source4/torture/rpc/samr.c
- source4/torture/rpc/samsync.c
- source4/torture/rpc/session_key.c
- source4/torture/rpc/spoolss.c
- source4/torture/rpc/testjoin.c
- source4/torture/rpc/winreg.c
- source4/torture/rpc/wkssvc.c


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/d1ccbd8eca41bc637c0af8bd4a4b192ced70bf8f...bd39bfe38745c6466ffaeb132963c534118e115a

-- 
View it on GitLab: https://salsa.debian.org/samba-team/samba/-/compare/d1ccbd8eca41bc637c0af8bd4a4b192ced70bf8f...bd39bfe38745c6466ffaeb132963c534118e115a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-samba-maint/attachments/20250707/728a9dbd/attachment-0001.htm>


More information about the Pkg-samba-maint mailing list