STEP01: librpc/rpc/dcerpc_connection.c: add dcerpc_security_get_auth_info

STEP01: librpc/rpc/dcerpc_connection.c: add dcerpc_connection_set_max_fragment_sizes()

STEP01: dcerpc_connection_create TODO max fragment sizes

This is just a hint, windows allows more in one fragment!

STEP01: librpc/rpc/dcerpc_connection.c dcerpc_connection_dead() dcerpc_connection_is_connected()

STEP01: librpc/rpc/dcerpc_connection.c incoming.req with tevent_req_defer_callback()

STEP01: sq dcerpc_presentation_status

STEP01: librpc/rpc/dcerpc_connection.c: fail dcerpc_do_bind without successful presentation

STEP01: librpc/rpc/dcerpc_connection.c add dcerpc_presentation_status()

STEP01: librpc/rpc/dcerpc_connection.c dcerpc_presentation_test_copy

STEP01: librpc/rpc/dcerpc_connection.c state->remaining_pres TODO AUTH3 PIPE_BUSY

STEP01: dcerpc_check_pdu_auth fix librpc/rpc/dcerpc_connection.c

STEP01: global fragment checking librpc/rpc/dcerpc_connection.

TODO verify header, reassemle? 4MB?

STEP01: librpc/rpc/dcerpc_connection.c active

STEP01: dcerpc_do_request_handle_in_frag recv multiple.

STEP01: librpc/rpc/dcerpc_connection.c trailer ...

STEP01: librpc/rpc/dcerpc_connection.c

STEP01: librpc/rpc/dcerpc_connection.c gensec

STEP01: dcerpc_do_bind_handle_in_frag alter...

STEP01: librpc/rpc/dcerpc_connection.c: dcerpc_ncacn_push_auth

STEP01: librpc/rpc/dcerpc_connection.c do_request use_trans part2

STEP01: librpc/rpc/dcerpc_connection.c do_request use_trans part1

STEP01: use trans librpc/rpc/dcerpc_connection.c

STEP01: loop librpc/rpc/dcerpc_connection.c

STEP01: librpc/rpc/dcerpc_connection.c use_trans

STEP01: librpc/rpc/dcerpc_connection.c rpcclient works?

STEP01: librpc/rpc/dcerpc_connection.c

STEP01: librpc/rpc/dcerpc_connection.c

STEP01: sq librpc/rpc/dcerpc_connection.c

STEP01: sq librpc/rpc/dcerpc_connection.c

STEP01: gla

STEP01: sq librpc/rpc/dcerpc_connection.c

STEP01: sq librpc/rpc/dcerpc_connection.[ch]

STEP01: dcerpc_do_bind/dcerpc_do_request

LATER STEP?? source4/rpc_server/remote/dcesrv_remote.c map from NTSTATUS to fault_state

HACK s4 client NDR_PRINT_DEBUG(ncacn_packet, pkt);

Revert "DCERPC server design ideas..."

This reverts commit d63d0442b9252619eaf2915ee419e4c3971a76f5.

DCERPC server design ideas...

git add -f bin/default/librpc/gen_ndr/*.{c,h,ndr,pidl} bin/default/source*/librpc/gen_ndr/*.{c,h,ndr,pidl}

HACK: pidl: always dump idl and ndr tree

Revert "debug"

This reverts commit 2dfd75cdbeb2ec0f69a8e3c54564e1adecc64567.

debug

Revert "source4/torture/smb2/durable_open.c"

This reverts commit 3f42beed778b2523f9be88834d510095482acecb.

source4/torture/smb2/durable_open.c

Revert "librpc/rpc: reset the assoc_group_id when setting the binding endpoint"

This reverts commit 6b96669dfed2e18a2c07e83559e3965c2777330b.

librpc/rpc: reset the assoc_group_id when setting the binding endpoint

The assoc_group_id is transport/endpoint specific.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "TODO timeout? libcli/smb: avoid sync close requests in tstream_smbXcli_np_destructor"

This reverts commit 1fa97ac96729f8bc5e4bdcaf20e6658d7d521515.

Revert "s4:librpc/rpc: remove dcerpc_shutdown_pipe() layer"

This reverts commit f9dfae142d580c288951c41eccbe481c326c7ca1.

s4:librpc/rpc: remove dcerpc_shutdown_pipe() layer

This is only called from dcerpc_connection_dead()
mostly via dcerpc_connection_destructor().

Calling tstream_disconnect_send(), triggers a smb*cli_close_send(),
but we implicitly call talloc_free() on the returned 'req',
before it's send into the low-level tcp socket, which means
the SMB signing gets out of sync. For now we just rely on
the tstream destructor to close the smb open.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

TODO timeout? libcli/smb: avoid sync close requests in tstream_smbXcli_np_destructor

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "debug"

This reverts commit cd2183082846af788a3fb55a5f4d9bb8f901160d.

debug

Revert "TODO PANIC/NONE sq s4:librpc/rpc: make use of dcerpc_binding_get_string_option("endpoint")"

This reverts commit ac3cc2a59e8d1cc9a9399fc5921031af2e44eb72.

TODO PANIC/NONE sq s4:librpc/rpc: make use of dcerpc_binding_get_string_option("endpoint")

Revert "debug"

This reverts commit 2dfd75cdbeb2ec0f69a8e3c54564e1adecc64567.

debug

s->pipe->binding = talloc_move(s->pipe, &s->binding);

s->pipe->binding = dcerpc_binding_dup(s->pipe, s->binding);

Revert "s->pipe->binding = dcerpc_binding_dup(s->pipe, s->binding);"

This reverts commit 5bc42fe2122cbd2adbef69df9c11c97f8c0984f4.

s->pipe->binding = dcerpc_binding_dup(s->pipe, s->binding);

sq dcerpc_binding_string_ex

sq TODO _dcerpc_binding_set_pointer_option

TODO _dcerpc_binding_set_pointer_option

Revert "TODO _dcerpc_binding_set_pointer_option"

This reverts commit 628f6a8b0cfdfac9a2cefde78e080e3852b735b9.

TODO _dcerpc_binding_set_pointer_option

OK - HACK smb_panic invalid options

OK as f61ebcb19c05cae3308b7b088958c7c985329284

s4:librpc/rpc: remove unused dcerpc_secondary_smb_send/recv()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s4:librpc/rpc: remove unused dcerpc_pipe_open_smb[2]()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s4:librpc/rpc: remove unused dcerpc_bind_auth_none()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

s4:librpc/rpc: remove unused dcerpc_bind_auth()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

sq dcerpc_binding_set_smbXcli_pointers s4:torture/samba3rpc: split out pipe_bind_smbXcli() and go via dcerpc_pipe_connect_b()

s4:torture/samba3rpc: split out pipe_bind_smbXcli() and go via dcerpc_pipe_connect_b()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

sq dcerpc_binding_set_smbXcli_pointers s4:libcli/clilsa: make use of dcerpc_pipe_connect_b()

s4:libcli/clilsa: make use of dcerpc_pipe_connect_b()

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "debug..."

This reverts commit 97b69b94e3e4e5426ce9c4765ffdf4ff05bd6169.

debug...

HACK fix...

sq dcerpc_binding_set_smbXcli_pointers s4:librpc/rpc: avoid using dcerpc_secondary_smb_send/recv

s4:librpc/rpc: avoid using dcerpc_secondary_smb_send/recv

We can now just use dcerpc_pipe_open_smb_send/recv and get
smbXcli_{conn,session,tcon} from the dcerpc_binding of the primary connection.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

sq dcerpc_binding_get_smbXcli_pointers s4:librpc/rpc: try to get the smbXcli_* pointers from the given dcerpc_binding options

s4:librpc/rpc: try to get the smbXcli_* pointers from the given dcerpc_binding options

Signed-off-by: Stefan Metzmacher <metze@samba.org>

sq dcerpc_binding_set_smbXcli_pointers s4:librpc/rpc: remember smbXcli_{conn,session,tcon} on new ncacn_np connection

s4:librpc/rpc: remember smbXcli_{conn,session,tcon} on new ncacn_np connection

Signed-off-by: Stefan Metzmacher <metze@samba.org>

dcerpc_binding_set_smbXcli_pointers

Revert "TODO pointer options..."

This reverts commit 2113b0721b70e3cc7d2fb5591ed8898d06fbef96.

TODO pointer options...

librpc/rpc: add dcerpc_binding_set_pointer_option()

This allows the caller to set a talloc pointer
as [<name>:pointer:<pid>:<type>=<address>]
(e.g. [connection:pointer:12345:struct smbXcli_conn=0xf0123456789abcde])
option of a dcerpc_binding.

Callers have to be careful to keep the pointer valid!

Signed-off-by: Stefan Metzmacher <metze@samba.org>

librpc/rpc: add dcerpc_binding_get_pointer_option()

This allows the caller to get a talloc pointer
out of a [<name>:pointer:<pid>:<type>=<address>]
(e.g. [connection:pointer:12345:struct smbXcli_conn=0xf0123456789abcde])
option of a dcerpc_binding.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Revert "source3/rpc_server/rpc_ncacn_np.c: tmp_mem"

This reverts commit 1a399c4d3270a4651ff5ae35237c5c12d89fe751.

source3/rpc_server/rpc_ncacn_np.c: tmp_mem

test_no_auth_bind_time*...

TODO: debug subtree_delete

s3-smbcontrol: Replace && with || to declare variables in do_sleep()

--enable-developer internally use --enable-selftest alongside. But when
configured only with --enable-selftest the following code block becomes
invalid:

 #if defined(DEVELOPER) && defined(ENABLE_SELFTEST)
        unsigned int seconds;
        long input;
        const long MAX_SLEEP = 60 * 60; /* One hour maximum sleep */
 #endif

making those variables undeclared for further use. Therefore replace &&
with || to have those variables declared with --enable-selftest
configure option.

Signed-off-by: Anoop C S <anoopcs@redhat.com>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Fri May 31 20:38:09 UTC 2019 on sn-devel-184

.gitlab-ci.yml: avoid using != to compare variables to support old versions

`!=` was only introduced after 11.11, according to doc at:

https://docs.gitlab.com/ee/ci/variables/README.html#environment-variables-expressions

For private gitlab instance, the version may not be new enough.
Use `==` to make it backward compatible.

Signed-off-by: Joe Guo <joeg@catalyst.net.nz>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Fri May 31 09:48:37 UTC 2019 on sn-devel-184

selftest: Don't use global dirs when parsing customdc realm

When creating the customdc, testparm would default to using
/usr/local/samba sub-directories for creating sockets and lock files.
Instead, pass in the tmpdir we just created as an option to the command.

Normally this didn't cause a noticeable problem, however, if we run the
command with UID-wrapper but without socket-wrapper (i.e.
USE_NAMESPACES=1), then it fails completely.

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri May 31 06:34:36 UTC 2019 on sn-devel-184

selftest: Add check customdc has valid realm/domain

If we couldn't determine the realm/domain from the backup file, it's a
lot nicer to fail early with a clear error message (rather than failing
later on with a really obscure message).

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

provision: Fallback to assumption root-UID==zero

Which is not a terrible assumption to make. The super-user on linux will
always have UID of zero, however, the super-user will not necessarily be
called "root".

This makes the provision/join commands work better when run in a
container. (And while deploying Samba in a container is perhaps not the
smartest move, this gives us some versatility when testing Samba).

This is needed to get the provision commands working in the domain_backup
tests when run with USE_NAMESPACES=1.

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

selftest: Add more notes on using selftest with namespaces

In particular, document how to hook up a testenv to a Windows VM
(ideally there should be a helper script to do this, but in the
meantime some instructions are better than nothing).

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

selftest: Add helper scripts for accessing the testenv namespace

This patch adds some helper scripts that make talking to a given
testenv's namespace slightly easier.

One of the really cool things about namespaces is you can run multiple
different programs that can all talk to the testenv DC. However, the
command to do this is a bit unweildly, it's based on PID so it changes
everytime you start up a testenv, and you loose all the environment
variables that selftest normally sets up.

This patch adds a couple of helper scripts:
- nsenter-helper.sh: this takes the variables defined in an exports_file
  and exports them all. It prints some basic help and then starts a new
  shell session (this whole script gets run in the new namespace).
  Essentially this achieves something similar to the legacy
  selftest-vars.sh script (except this one actually works).
- mk_nsenter.sh: this generates a simple wrapper script that'll run
  nsenter and then call nsenter-helper.sh. A separate wrapper script
  gets created for each testenv. E.g. to run it, just go:
    ./st/ad_dc/nsenter.sh

  This is a wrapper for a more complicated command underneath like:
    nsenter -t 437353 --net --user --preserve-credentials \
      /home/timbeale/code/samba/selftest/ns/nsenter-helper.sh \
      /home/timbeale/code/samba/st/ad_dc/exports.sh

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

selftest: Add linux namespace support (USE_NAMESPACES=1)

This hooks up the selftest/ns/* scripts added earlier with the selftest
system, so developers can optionally run a testenv or test using linux
namespaces instead of socket-wrapper.

The idea is this is experimental functionality that we can extend
further in future, in order to make testing Samba more versatile.

+ The top-level WAF script now does an 'unshare' to create a new
top-level 'selftest' namespace in which to create the testenv(s).
+ selftest.pl creates a common 'selftest0' bridge to connect together
the individual DCs.
+ Update Samba.pm so it can use real IPs instead of loopback addresses.
In fork_and_exec(), we add a couple of hooks so that the binary gets
started in a different namespace (using unshare/start_in_ns.sh), and
the parent process connects the new child namespace up to the common
selftest0 bridge (using add_bridge_iface.sh).

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

selftest: Add TESTENV_DIR "env" variable

We store the testenv directory path for the 'ctx' hashmap, but not for
the testenv-vars hashmap (and that can be really annoying sometimes).
Add it into the second hashmap that selftest actually keeps track of.
Currently it's only stored in the hashmap, not actually exported as an
environment variable (but we could easily do that if a test-case need
this info).

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>