1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/source4
Douglas Bagnall 906a53f442 samldb: ensure subnets have proper net ranges
A subnet name needs to be a valid CIDR address range -- that's the
ones that look like 10.9.8.0/22, where the number after the /
determines how many bits are in the address suffix. It can be IPv4 or
IPv6. There are a few odd constraints (see MS-ADTS v20150630
6.1.1.2.2.2.1 "Subnet Object") -- for example, with IPv4, the implied
bit mask can't equal the address. That is, you can't have a subnet
named "255.255.255.0/24" in a Windows subnet. This rule does not apply
to IPv6.

Windows and Samba both make some ensure that subnets have a unique
valid name, though unfortunately Windows 2008R2 is rather slack when
it comes to IPv6. We follow Windows 2012R2, which roughly follows
RFC5952 -- with one caveat: Windows will allow an address like
"::ffff:0:1:2", which translates to the IPv4 address "0.1.0.2" using
the SIIT translation scheme, and which inet_ntop() would render as
"::ffff:0:0.1.0.2". In the Samba implementation we use an inet_pton()/
inet_ntop() round-trip to establish canonicality, so these addresses
fail. Windows wisely does not allow the SIIT style addresses (the
acronym is widely agreed to be off-by-one in the second letter), and
it will regard "::ffff:0:1:2" as simply "::ffff:0:1:2" and allow it.
We would like to do that too.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2015-12-24 04:09:29 +01:00
..
auth auth: keep track of lastLogon and lastLogonTimestamp 2015-12-15 00:08:57 +01:00
build/pasn1
cldap_server s3/s4: smbd, rpc, ldap, cldap, kdc services. 2014-06-07 01:01:43 +02:00
client s4/client: add FS_SECTOR_SIZE_INFORMATION query support 2015-03-18 18:57:20 +01:00
cluster Remove callers of lp_use_ntdb 2015-03-17 11:30:51 +01:00
dns_server dns_server: Remove unused handle_question 2015-12-15 17:50:32 +01:00
dsdb samldb: ensure subnets have proper net ranges 2015-12-24 04:09:29 +01:00
echo_server Fix various spelling errors 2015-11-06 13:43:45 +01:00
heimdal Fix memory leak in dns resolution during spnego authentication using kerberos. 2015-09-03 19:11:22 +02:00
heimdal_build s4:heimdal_build: also use check_system_heimdal_lib() for "com_err" 2015-10-31 22:03:14 +01:00
include lib/util: Include DEBUG macro in internal header files before samba_util.h 2015-03-11 18:47:22 +01:00
kdc auth: keep track of lastLogon and lastLogonTimestamp 2015-12-15 00:08:57 +01:00
ldap_server lib/tls: Add new 'tls priority' option 2015-07-20 03:08:26 +02:00
lib waf: Check for GnuTLS 3.4.7 2015-12-10 08:49:20 +01:00
libcli lib/tls: Add new 'tls priority' option 2015-07-20 03:08:26 +02:00
libnet repl: Use DSDB_REPL_FLAG_PRIORITISE_INCOMING in samba-tool drs replicate --local 2015-10-26 05:11:21 +01:00
librpc lib/tls: Add new 'tls priority' option 2015-07-20 03:08:26 +02:00
nbt_server Fix a typo 2015-06-19 01:05:17 +02:00
ntp_signd
ntptr
ntvfs Fix various spelling errors 2015-11-06 13:43:45 +01:00
param s4-param: Make sure newname is not used uninitialized 2015-11-17 16:48:23 +01:00
rpc_server s4-rpc_server: Add a GnuTLS based backupkey implementation 2015-12-10 08:49:20 +01:00
script find_unused_macros: Remove obsolete script that finds unused macros. 2014-08-31 21:21:13 +02:00
scripting samba_upgradedns: Set correct permissions on secrets.keytab for BIND9 2015-12-15 08:42:20 +01:00
selftest samba-tool tests: Add command line tests for sites 2015-12-24 04:09:29 +01:00
setup build:wafsamba: Install named.conf only once 2015-11-16 11:48:14 +01:00
smb_server build: Enable NTVFS file server to be omitted 2015-10-23 22:27:30 +02:00
smbd Rely on /dev/urandom 2015-10-13 04:25:38 +02:00
torture torture/gentest time_skew(): don't use labs() on unsigned NTTIME 2015-12-24 04:09:28 +01:00
utils Fix various spelling errors 2015-11-06 13:43:45 +01:00
web_server web_server: Fix server not to segfault on startup 2015-08-31 04:11:55 +02:00
winbind s4-winbindd: Remove the winbind rewrite from the samba4 effort 2015-06-24 22:34:57 +02:00
wrepl_server Remove all uses of the NT_STATUS_NOT_OK_RETURN_AND_FREE macro from the codebase. 2014-03-05 16:33:22 +01:00
.clang_complete
.valgrind_suppressions
wscript_build Do not install smbclient4 and nmblookup4 2014-04-15 03:25:13 +02:00