--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: buster-pu: package samba/2:4.9.11+dfsg-1~deb10u1
- From: Mathieu Parent <sathieu@debian.org>
- Date: Mon, 08 Jul 2019 10:23:49 +0200
- Message-id: <156257422975.26650.16578032359860127313.reportbug@camille.sathieu.net>
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org@packages.debian.org
Usertags: pu
Hello,
I just uploaded ldb and samba to sid, I'm targeting buster-p-u with the following changes:
ldb (2:1.5.1+really1.4.7-1~deb10u1) unstable; urgency=medium
[ Salsa Pipeline ]
* Update salsa CI pipeline
[ Mathieu Parent ]
* New upstream version 1.4.7
- Update symbols (no change)
-- Mathieu Parent <sathieu@debian.org> Sun, 07 Jul 2019 10:06:38 +0200
ldb is actually a one line change, see attachements.
samba (2:4.9.11+dfsg-1~deb10u1) unstable; urgency=medium
[ Mathieu Parent ]
* New upstream release
- Bump ldb Build-Depends to 2:1.5.1+really1.4.7
- Fixes printing via smbspool backend with kerberos auth (Closes: #931481)
- Drop security patches, merged upstream
- libsamba-passdb.so bumped to 0.27.2
* Enable vfs_nfs4acl_xattr (Closes: #930540)
[ Rafael David Tinoco ]
* debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
(Closes: #931138)
* CTDB NFS fixes (Closes: #929931, LP: #722201):
- d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
name from nfs to nfs-kernel-server
- ctdb-config: depend on /etc/ctdb/nodes file
- d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
allow pid file to exist
- added /var/lib/ctdb/* directories
- d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
- Add examples of NFS HA CTDB config files + helper script
-- Mathieu Parent <sathieu@debian.org> Mon, 08 Jul 2019 09:56:36 +0200
samba is the latest 4.9.x upstream release (4.9 is in maint mode until
mid-september, see [1]). It includes a lot of stability fixes, including
crashes, memory leaks and #931481. The included security fixes were already in
Debian.
I added an useful vfs module (vfs_nfs4acl_xattr). No regression risk here (#930540).
I also added the CTDB NFS improvements from Ubuntu. CTDB NFS was broken before,
so no regression expected ;-).
I only attach the diff of the debian directory.
I hope you have enough info.
Regards
Mathieu Parent
[1]: https://wiki.samba.org/index.php/Samba_Release_Planning#Maintenance_Mode
-- System Information:
Debian Release: 10.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
diff -Nru ldb-1.5.1+really1.4.6/ABI/ldb-1.4.7.sigs ldb-1.5.1+really1.4.7/ABI/ldb-1.4.7.sigs
--- ldb-1.5.1+really1.4.6/ABI/ldb-1.4.7.sigs 1970-01-01 01:00:00.000000000 +0100
+++ ldb-1.5.1+really1.4.7/ABI/ldb-1.4.7.sigs 2019-07-03 12:32:42.000000000 +0200
@@ -0,0 +1,279 @@
+ldb_add: int (struct ldb_context *, const struct ldb_message *)
+ldb_any_comparison: int (struct ldb_context *, void *, ldb_attr_handler_t, const struct ldb_val *, const struct ldb_val *)
+ldb_asprintf_errstring: void (struct ldb_context *, const char *, ...)
+ldb_attr_casefold: char *(TALLOC_CTX *, const char *)
+ldb_attr_dn: int (const char *)
+ldb_attr_in_list: int (const char * const *, const char *)
+ldb_attr_list_copy: const char **(TALLOC_CTX *, const char * const *)
+ldb_attr_list_copy_add: const char **(TALLOC_CTX *, const char * const *, const char *)
+ldb_base64_decode: int (char *)
+ldb_base64_encode: char *(TALLOC_CTX *, const char *, int)
+ldb_binary_decode: struct ldb_val (TALLOC_CTX *, const char *)
+ldb_binary_encode: char *(TALLOC_CTX *, struct ldb_val)
+ldb_binary_encode_string: char *(TALLOC_CTX *, const char *)
+ldb_build_add_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, const struct ldb_message *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_del_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, struct ldb_dn *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_extended_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, const char *, void *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_mod_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, const struct ldb_message *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_rename_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, struct ldb_dn *, struct ldb_dn *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_search_req: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, struct ldb_dn *, enum ldb_scope, const char *, const char * const *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_build_search_req_ex: int (struct ldb_request **, struct ldb_context *, TALLOC_CTX *, struct ldb_dn *, enum ldb_scope, struct ldb_parse_tree *, const char * const *, struct ldb_control **, void *, ldb_request_callback_t, struct ldb_request *)
+ldb_casefold: char *(struct ldb_context *, TALLOC_CTX *, const char *, size_t)
+ldb_casefold_default: char *(void *, TALLOC_CTX *, const char *, size_t)
+ldb_check_critical_controls: int (struct ldb_control **)
+ldb_comparison_binary: int (struct ldb_context *, void *, const struct ldb_val *, const struct ldb_val *)
+ldb_comparison_fold: int (struct ldb_context *, void *, const struct ldb_val *, const struct ldb_val *)
+ldb_connect: int (struct ldb_context *, const char *, unsigned int, const char **)
+ldb_control_to_string: char *(TALLOC_CTX *, const struct ldb_control *)
+ldb_controls_except_specified: struct ldb_control **(struct ldb_control **, TALLOC_CTX *, struct ldb_control *)
+ldb_debug: void (struct ldb_context *, enum ldb_debug_level, const char *, ...)
+ldb_debug_add: void (struct ldb_context *, const char *, ...)
+ldb_debug_end: void (struct ldb_context *, enum ldb_debug_level)
+ldb_debug_set: void (struct ldb_context *, enum ldb_debug_level, const char *, ...)
+ldb_delete: int (struct ldb_context *, struct ldb_dn *)
+ldb_dn_add_base: bool (struct ldb_dn *, struct ldb_dn *)
+ldb_dn_add_base_fmt: bool (struct ldb_dn *, const char *, ...)
+ldb_dn_add_child: bool (struct ldb_dn *, struct ldb_dn *)
+ldb_dn_add_child_fmt: bool (struct ldb_dn *, const char *, ...)
+ldb_dn_alloc_casefold: char *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_alloc_linearized: char *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_canonical_ex_string: char *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_canonical_string: char *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_check_local: bool (struct ldb_module *, struct ldb_dn *)
+ldb_dn_check_special: bool (struct ldb_dn *, const char *)
+ldb_dn_compare: int (struct ldb_dn *, struct ldb_dn *)
+ldb_dn_compare_base: int (struct ldb_dn *, struct ldb_dn *)
+ldb_dn_copy: struct ldb_dn *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_escape_value: char *(TALLOC_CTX *, struct ldb_val)
+ldb_dn_extended_add_syntax: int (struct ldb_context *, unsigned int, const struct ldb_dn_extended_syntax *)
+ldb_dn_extended_filter: void (struct ldb_dn *, const char * const *)
+ldb_dn_extended_syntax_by_name: const struct ldb_dn_extended_syntax *(struct ldb_context *, const char *)
+ldb_dn_from_ldb_val: struct ldb_dn *(TALLOC_CTX *, struct ldb_context *, const struct ldb_val *)
+ldb_dn_get_casefold: const char *(struct ldb_dn *)
+ldb_dn_get_comp_num: int (struct ldb_dn *)
+ldb_dn_get_component_name: const char *(struct ldb_dn *, unsigned int)
+ldb_dn_get_component_val: const struct ldb_val *(struct ldb_dn *, unsigned int)
+ldb_dn_get_extended_comp_num: int (struct ldb_dn *)
+ldb_dn_get_extended_component: const struct ldb_val *(struct ldb_dn *, const char *)
+ldb_dn_get_extended_linearized: char *(TALLOC_CTX *, struct ldb_dn *, int)
+ldb_dn_get_ldb_context: struct ldb_context *(struct ldb_dn *)
+ldb_dn_get_linearized: const char *(struct ldb_dn *)
+ldb_dn_get_parent: struct ldb_dn *(TALLOC_CTX *, struct ldb_dn *)
+ldb_dn_get_rdn_name: const char *(struct ldb_dn *)
+ldb_dn_get_rdn_val: const struct ldb_val *(struct ldb_dn *)
+ldb_dn_has_extended: bool (struct ldb_dn *)
+ldb_dn_is_null: bool (struct ldb_dn *)
+ldb_dn_is_special: bool (struct ldb_dn *)
+ldb_dn_is_valid: bool (struct ldb_dn *)
+ldb_dn_map_local: struct ldb_dn *(struct ldb_module *, void *, struct ldb_dn *)
+ldb_dn_map_rebase_remote: struct ldb_dn *(struct ldb_module *, void *, struct ldb_dn *)
+ldb_dn_map_remote: struct ldb_dn *(struct ldb_module *, void *, struct ldb_dn *)
+ldb_dn_minimise: bool (struct ldb_dn *)
+ldb_dn_new: struct ldb_dn *(TALLOC_CTX *, struct ldb_context *, const char *)
+ldb_dn_new_fmt: struct ldb_dn *(TALLOC_CTX *, struct ldb_context *, const char *, ...)
+ldb_dn_remove_base_components: bool (struct ldb_dn *, unsigned int)
+ldb_dn_remove_child_components: bool (struct ldb_dn *, unsigned int)
+ldb_dn_remove_extended_components: void (struct ldb_dn *)
+ldb_dn_replace_components: bool (struct ldb_dn *, struct ldb_dn *)
+ldb_dn_set_component: int (struct ldb_dn *, int, const char *, const struct ldb_val)
+ldb_dn_set_extended_component: int (struct ldb_dn *, const char *, const struct ldb_val *)
+ldb_dn_update_components: int (struct ldb_dn *, const struct ldb_dn *)
+ldb_dn_validate: bool (struct ldb_dn *)
+ldb_dump_results: void (struct ldb_context *, struct ldb_result *, FILE *)
+ldb_error_at: int (struct ldb_context *, int, const char *, const char *, int)
+ldb_errstring: const char *(struct ldb_context *)
+ldb_extended: int (struct ldb_context *, const char *, void *, struct ldb_result **)
+ldb_extended_default_callback: int (struct ldb_request *, struct ldb_reply *)
+ldb_filter_from_tree: char *(TALLOC_CTX *, const struct ldb_parse_tree *)
+ldb_get_config_basedn: struct ldb_dn *(struct ldb_context *)
+ldb_get_create_perms: unsigned int (struct ldb_context *)
+ldb_get_default_basedn: struct ldb_dn *(struct ldb_context *)
+ldb_get_event_context: struct tevent_context *(struct ldb_context *)
+ldb_get_flags: unsigned int (struct ldb_context *)
+ldb_get_opaque: void *(struct ldb_context *, const char *)
+ldb_get_root_basedn: struct ldb_dn *(struct ldb_context *)
+ldb_get_schema_basedn: struct ldb_dn *(struct ldb_context *)
+ldb_global_init: int (void)
+ldb_handle_get_event_context: struct tevent_context *(struct ldb_handle *)
+ldb_handle_new: struct ldb_handle *(TALLOC_CTX *, struct ldb_context *)
+ldb_handle_use_global_event_context: void (struct ldb_handle *)
+ldb_handler_copy: int (struct ldb_context *, void *, const struct ldb_val *, struct ldb_val *)
+ldb_handler_fold: int (struct ldb_context *, void *, const struct ldb_val *, struct ldb_val *)
+ldb_init: struct ldb_context *(TALLOC_CTX *, struct tevent_context *)
+ldb_ldif_message_redacted_string: char *(struct ldb_context *, TALLOC_CTX *, enum ldb_changetype, const struct ldb_message *)
+ldb_ldif_message_string: char *(struct ldb_context *, TALLOC_CTX *, enum ldb_changetype, const struct ldb_message *)
+ldb_ldif_parse_modrdn: int (struct ldb_context *, const struct ldb_ldif *, TALLOC_CTX *, struct ldb_dn **, struct ldb_dn **, bool *, struct ldb_dn **, struct ldb_dn **)
+ldb_ldif_read: struct ldb_ldif *(struct ldb_context *, int (*)(void *), void *)
+ldb_ldif_read_file: struct ldb_ldif *(struct ldb_context *, FILE *)
+ldb_ldif_read_file_state: struct ldb_ldif *(struct ldb_context *, struct ldif_read_file_state *)
+ldb_ldif_read_free: void (struct ldb_context *, struct ldb_ldif *)
+ldb_ldif_read_string: struct ldb_ldif *(struct ldb_context *, const char **)
+ldb_ldif_write: int (struct ldb_context *, int (*)(void *, const char *, ...), void *, const struct ldb_ldif *)
+ldb_ldif_write_file: int (struct ldb_context *, FILE *, const struct ldb_ldif *)
+ldb_ldif_write_redacted_trace_string: char *(struct ldb_context *, TALLOC_CTX *, const struct ldb_ldif *)
+ldb_ldif_write_string: char *(struct ldb_context *, TALLOC_CTX *, const struct ldb_ldif *)
+ldb_load_modules: int (struct ldb_context *, const char **)
+ldb_map_add: int (struct ldb_module *, struct ldb_request *)
+ldb_map_delete: int (struct ldb_module *, struct ldb_request *)
+ldb_map_init: int (struct ldb_module *, const struct ldb_map_attribute *, const struct ldb_map_objectclass *, const char * const *, const char *, const char *)
+ldb_map_modify: int (struct ldb_module *, struct ldb_request *)
+ldb_map_rename: int (struct ldb_module *, struct ldb_request *)
+ldb_map_search: int (struct ldb_module *, struct ldb_request *)
+ldb_match_message: int (struct ldb_context *, const struct ldb_message *, const struct ldb_parse_tree *, enum ldb_scope, bool *)
+ldb_match_msg: int (struct ldb_context *, const struct ldb_message *, const struct ldb_parse_tree *, struct ldb_dn *, enum ldb_scope)
+ldb_match_msg_error: int (struct ldb_context *, const struct ldb_message *, const struct ldb_parse_tree *, struct ldb_dn *, enum ldb_scope, bool *)
+ldb_match_msg_objectclass: int (const struct ldb_message *, const char *)
+ldb_mod_register_control: int (struct ldb_module *, const char *)
+ldb_modify: int (struct ldb_context *, const struct ldb_message *)
+ldb_modify_default_callback: int (struct ldb_request *, struct ldb_reply *)
+ldb_module_call_chain: char *(struct ldb_request *, TALLOC_CTX *)
+ldb_module_connect_backend: int (struct ldb_context *, const char *, const char **, struct ldb_module **)
+ldb_module_done: int (struct ldb_request *, struct ldb_control **, struct ldb_extended *, int)
+ldb_module_flags: uint32_t (struct ldb_context *)
+ldb_module_get_ctx: struct ldb_context *(struct ldb_module *)
+ldb_module_get_name: const char *(struct ldb_module *)
+ldb_module_get_ops: const struct ldb_module_ops *(struct ldb_module *)
+ldb_module_get_private: void *(struct ldb_module *)
+ldb_module_init_chain: int (struct ldb_context *, struct ldb_module *)
+ldb_module_load_list: int (struct ldb_context *, const char **, struct ldb_module *, struct ldb_module **)
+ldb_module_new: struct ldb_module *(TALLOC_CTX *, struct ldb_context *, const char *, const struct ldb_module_ops *)
+ldb_module_next: struct ldb_module *(struct ldb_module *)
+ldb_module_popt_options: struct poptOption **(struct ldb_context *)
+ldb_module_send_entry: int (struct ldb_request *, struct ldb_message *, struct ldb_control **)
+ldb_module_send_referral: int (struct ldb_request *, char *)
+ldb_module_set_next: void (struct ldb_module *, struct ldb_module *)
+ldb_module_set_private: void (struct ldb_module *, void *)
+ldb_modules_hook: int (struct ldb_context *, enum ldb_module_hook_type)
+ldb_modules_list_from_string: const char **(struct ldb_context *, TALLOC_CTX *, const char *)
+ldb_modules_load: int (const char *, const char *)
+ldb_msg_add: int (struct ldb_message *, const struct ldb_message_element *, int)
+ldb_msg_add_empty: int (struct ldb_message *, const char *, int, struct ldb_message_element **)
+ldb_msg_add_fmt: int (struct ldb_message *, const char *, const char *, ...)
+ldb_msg_add_linearized_dn: int (struct ldb_message *, const char *, struct ldb_dn *)
+ldb_msg_add_steal_string: int (struct ldb_message *, const char *, char *)
+ldb_msg_add_steal_value: int (struct ldb_message *, const char *, struct ldb_val *)
+ldb_msg_add_string: int (struct ldb_message *, const char *, const char *)
+ldb_msg_add_value: int (struct ldb_message *, const char *, const struct ldb_val *, struct ldb_message_element **)
+ldb_msg_canonicalize: struct ldb_message *(struct ldb_context *, const struct ldb_message *)
+ldb_msg_check_string_attribute: int (const struct ldb_message *, const char *, const char *)
+ldb_msg_copy: struct ldb_message *(TALLOC_CTX *, const struct ldb_message *)
+ldb_msg_copy_attr: int (struct ldb_message *, const char *, const char *)
+ldb_msg_copy_shallow: struct ldb_message *(TALLOC_CTX *, const struct ldb_message *)
+ldb_msg_diff: struct ldb_message *(struct ldb_context *, struct ldb_message *, struct ldb_message *)
+ldb_msg_difference: int (struct ldb_context *, TALLOC_CTX *, struct ldb_message *, struct ldb_message *, struct ldb_message **)
+ldb_msg_element_compare: int (struct ldb_message_element *, struct ldb_message_element *)
+ldb_msg_element_compare_name: int (struct ldb_message_element *, struct ldb_message_element *)
+ldb_msg_element_equal_ordered: bool (const struct ldb_message_element *, const struct ldb_message_element *)
+ldb_msg_find_attr_as_bool: int (const struct ldb_message *, const char *, int)
+ldb_msg_find_attr_as_dn: struct ldb_dn *(struct ldb_context *, TALLOC_CTX *, const struct ldb_message *, const char *)
+ldb_msg_find_attr_as_double: double (const struct ldb_message *, const char *, double)
+ldb_msg_find_attr_as_int: int (const struct ldb_message *, const char *, int)
+ldb_msg_find_attr_as_int64: int64_t (const struct ldb_message *, const char *, int64_t)
+ldb_msg_find_attr_as_string: const char *(const struct ldb_message *, const char *, const char *)
+ldb_msg_find_attr_as_uint: unsigned int (const struct ldb_message *, const char *, unsigned int)
+ldb_msg_find_attr_as_uint64: uint64_t (const struct ldb_message *, const char *, uint64_t)
+ldb_msg_find_common_values: int (struct ldb_context *, TALLOC_CTX *, struct ldb_message_element *, struct ldb_message_element *, uint32_t)
+ldb_msg_find_duplicate_val: int (struct ldb_context *, TALLOC_CTX *, const struct ldb_message_element *, struct ldb_val **, uint32_t)
+ldb_msg_find_element: struct ldb_message_element *(const struct ldb_message *, const char *)
+ldb_msg_find_ldb_val: const struct ldb_val *(const struct ldb_message *, const char *)
+ldb_msg_find_val: struct ldb_val *(const struct ldb_message_element *, struct ldb_val *)
+ldb_msg_new: struct ldb_message *(TALLOC_CTX *)
+ldb_msg_normalize: int (struct ldb_context *, TALLOC_CTX *, const struct ldb_message *, struct ldb_message **)
+ldb_msg_remove_attr: void (struct ldb_message *, const char *)
+ldb_msg_remove_element: void (struct ldb_message *, struct ldb_message_element *)
+ldb_msg_rename_attr: int (struct ldb_message *, const char *, const char *)
+ldb_msg_sanity_check: int (struct ldb_context *, const struct ldb_message *)
+ldb_msg_sort_elements: void (struct ldb_message *)
+ldb_next_del_trans: int (struct ldb_module *)
+ldb_next_end_trans: int (struct ldb_module *)
+ldb_next_init: int (struct ldb_module *)
+ldb_next_prepare_commit: int (struct ldb_module *)
+ldb_next_read_lock: int (struct ldb_module *)
+ldb_next_read_unlock: int (struct ldb_module *)
+ldb_next_remote_request: int (struct ldb_module *, struct ldb_request *)
+ldb_next_request: int (struct ldb_module *, struct ldb_request *)
+ldb_next_start_trans: int (struct ldb_module *)
+ldb_op_default_callback: int (struct ldb_request *, struct ldb_reply *)
+ldb_options_find: const char *(struct ldb_context *, const char **, const char *)
+ldb_pack_data: int (struct ldb_context *, const struct ldb_message *, struct ldb_val *)
+ldb_parse_control_from_string: struct ldb_control *(struct ldb_context *, TALLOC_CTX *, const char *)
+ldb_parse_control_strings: struct ldb_control **(struct ldb_context *, TALLOC_CTX *, const char **)
+ldb_parse_tree: struct ldb_parse_tree *(TALLOC_CTX *, const char *)
+ldb_parse_tree_attr_replace: void (struct ldb_parse_tree *, const char *, const char *)
+ldb_parse_tree_copy_shallow: struct ldb_parse_tree *(TALLOC_CTX *, const struct ldb_parse_tree *)
+ldb_parse_tree_walk: int (struct ldb_parse_tree *, int (*)(struct ldb_parse_tree *, void *), void *)
+ldb_qsort: void (void * const, size_t, size_t, void *, ldb_qsort_cmp_fn_t)
+ldb_register_backend: int (const char *, ldb_connect_fn, bool)
+ldb_register_extended_match_rule: int (struct ldb_context *, const struct ldb_extended_match_rule *)
+ldb_register_hook: int (ldb_hook_fn)
+ldb_register_module: int (const struct ldb_module_ops *)
+ldb_rename: int (struct ldb_context *, struct ldb_dn *, struct ldb_dn *)
+ldb_reply_add_control: int (struct ldb_reply *, const char *, bool, void *)
+ldb_reply_get_control: struct ldb_control *(struct ldb_reply *, const char *)
+ldb_req_get_custom_flags: uint32_t (struct ldb_request *)
+ldb_req_is_untrusted: bool (struct ldb_request *)
+ldb_req_location: const char *(struct ldb_request *)
+ldb_req_mark_trusted: void (struct ldb_request *)
+ldb_req_mark_untrusted: void (struct ldb_request *)
+ldb_req_set_custom_flags: void (struct ldb_request *, uint32_t)
+ldb_req_set_location: void (struct ldb_request *, const char *)
+ldb_request: int (struct ldb_context *, struct ldb_request *)
+ldb_request_add_control: int (struct ldb_request *, const char *, bool, void *)
+ldb_request_done: int (struct ldb_request *, int)
+ldb_request_get_control: struct ldb_control *(struct ldb_request *, const char *)
+ldb_request_get_status: int (struct ldb_request *)
+ldb_request_replace_control: int (struct ldb_request *, const char *, bool, void *)
+ldb_request_set_state: void (struct ldb_request *, int)
+ldb_reset_err_string: void (struct ldb_context *)
+ldb_save_controls: int (struct ldb_control *, struct ldb_request *, struct ldb_control ***)
+ldb_schema_attribute_add: int (struct ldb_context *, const char *, unsigned int, const char *)
+ldb_schema_attribute_add_with_syntax: int (struct ldb_context *, const char *, unsigned int, const struct ldb_schema_syntax *)
+ldb_schema_attribute_by_name: const struct ldb_schema_attribute *(struct ldb_context *, const char *)
+ldb_schema_attribute_fill_with_syntax: int (struct ldb_context *, TALLOC_CTX *, const char *, unsigned int, const struct ldb_schema_syntax *, struct ldb_schema_attribute *)
+ldb_schema_attribute_remove: void (struct ldb_context *, const char *)
+ldb_schema_attribute_remove_flagged: void (struct ldb_context *, unsigned int)
+ldb_schema_attribute_set_override_handler: void (struct ldb_context *, ldb_attribute_handler_override_fn_t, void *)
+ldb_schema_set_override_GUID_index: void (struct ldb_context *, const char *, const char *)
+ldb_schema_set_override_indexlist: void (struct ldb_context *, bool)
+ldb_search: int (struct ldb_context *, TALLOC_CTX *, struct ldb_result **, struct ldb_dn *, enum ldb_scope, const char * const *, const char *, ...)
+ldb_search_default_callback: int (struct ldb_request *, struct ldb_reply *)
+ldb_sequence_number: int (struct ldb_context *, enum ldb_sequence_type, uint64_t *)
+ldb_set_create_perms: void (struct ldb_context *, unsigned int)
+ldb_set_debug: int (struct ldb_context *, void (*)(void *, enum ldb_debug_level, const char *, va_list), void *)
+ldb_set_debug_stderr: int (struct ldb_context *)
+ldb_set_default_dns: void (struct ldb_context *)
+ldb_set_errstring: void (struct ldb_context *, const char *)
+ldb_set_event_context: void (struct ldb_context *, struct tevent_context *)
+ldb_set_flags: void (struct ldb_context *, unsigned int)
+ldb_set_modules_dir: void (struct ldb_context *, const char *)
+ldb_set_opaque: int (struct ldb_context *, const char *, void *)
+ldb_set_require_private_event_context: void (struct ldb_context *)
+ldb_set_timeout: int (struct ldb_context *, struct ldb_request *, int)
+ldb_set_timeout_from_prev_req: int (struct ldb_context *, struct ldb_request *, struct ldb_request *)
+ldb_set_utf8_default: void (struct ldb_context *)
+ldb_set_utf8_fns: void (struct ldb_context *, void *, char *(*)(void *, void *, const char *, size_t))
+ldb_setup_wellknown_attributes: int (struct ldb_context *)
+ldb_should_b64_encode: int (struct ldb_context *, const struct ldb_val *)
+ldb_standard_syntax_by_name: const struct ldb_schema_syntax *(struct ldb_context *, const char *)
+ldb_strerror: const char *(int)
+ldb_string_to_time: time_t (const char *)
+ldb_string_utc_to_time: time_t (const char *)
+ldb_timestring: char *(TALLOC_CTX *, time_t)
+ldb_timestring_utc: char *(TALLOC_CTX *, time_t)
+ldb_transaction_cancel: int (struct ldb_context *)
+ldb_transaction_cancel_noerr: int (struct ldb_context *)
+ldb_transaction_commit: int (struct ldb_context *)
+ldb_transaction_prepare_commit: int (struct ldb_context *)
+ldb_transaction_start: int (struct ldb_context *)
+ldb_unpack_data: int (struct ldb_context *, const struct ldb_val *, struct ldb_message *)
+ldb_unpack_data_only_attr_list: int (struct ldb_context *, const struct ldb_val *, struct ldb_message *, const char * const *, unsigned int, unsigned int *)
+ldb_unpack_data_only_attr_list_flags: int (struct ldb_context *, const struct ldb_val *, struct ldb_message *, const char * const *, unsigned int, unsigned int, unsigned int *)
+ldb_val_dup: struct ldb_val (TALLOC_CTX *, const struct ldb_val *)
+ldb_val_equal_exact: int (const struct ldb_val *, const struct ldb_val *)
+ldb_val_map_local: struct ldb_val (struct ldb_module *, void *, const struct ldb_map_attribute *, const struct ldb_val *)
+ldb_val_map_remote: struct ldb_val (struct ldb_module *, void *, const struct ldb_map_attribute *, const struct ldb_val *)
+ldb_val_string_cmp: int (const struct ldb_val *, const char *)
+ldb_val_to_time: int (const struct ldb_val *, time_t *)
+ldb_valid_attr_name: int (const char *)
+ldb_vdebug: void (struct ldb_context *, enum ldb_debug_level, const char *, va_list)
+ldb_wait: int (struct ldb_handle *, enum ldb_wait_type)
diff -Nru ldb-1.5.1+really1.4.6/ABI/pyldb-util-1.4.7.sigs ldb-1.5.1+really1.4.7/ABI/pyldb-util-1.4.7.sigs
--- ldb-1.5.1+really1.4.6/ABI/pyldb-util-1.4.7.sigs 1970-01-01 01:00:00.000000000 +0100
+++ ldb-1.5.1+really1.4.7/ABI/pyldb-util-1.4.7.sigs 2019-07-03 12:32:42.000000000 +0200
@@ -0,0 +1,2 @@
+pyldb_Dn_FromDn: PyObject *(struct ldb_dn *)
+pyldb_Object_AsDn: bool (TALLOC_CTX *, PyObject *, struct ldb_context *, struct ldb_dn **)
diff -Nru ldb-1.5.1+really1.4.6/ABI/pyldb-util.py3-1.4.7.sigs ldb-1.5.1+really1.4.7/ABI/pyldb-util.py3-1.4.7.sigs
--- ldb-1.5.1+really1.4.6/ABI/pyldb-util.py3-1.4.7.sigs 1970-01-01 01:00:00.000000000 +0100
+++ ldb-1.5.1+really1.4.7/ABI/pyldb-util.py3-1.4.7.sigs 2019-07-03 12:32:42.000000000 +0200
@@ -0,0 +1,2 @@
+pyldb_Dn_FromDn: PyObject *(struct ldb_dn *)
+pyldb_Object_AsDn: bool (TALLOC_CTX *, PyObject *, struct ldb_context *, struct ldb_dn **)
diff -Nru ldb-1.5.1+really1.4.6/debian/changelog ldb-1.5.1+really1.4.7/debian/changelog
--- ldb-1.5.1+really1.4.6/debian/changelog 2019-03-30 18:09:28.000000000 +0100
+++ ldb-1.5.1+really1.4.7/debian/changelog 2019-07-07 10:06:38.000000000 +0200
@@ -1,3 +1,14 @@
+ldb (2:1.5.1+really1.4.7-1) unstable; urgency=medium
+
+ [ Salsa Pipeline ]
+ * Update salsa CI pipeline
+
+ [ Mathieu Parent ]
+ * New upstream version 1.4.7
+ - Update symbols (no change)
+
+ -- Mathieu Parent <sathieu@debian.org> Sun, 07 Jul 2019 10:06:38 +0200
+
ldb (2:1.5.1+really1.4.6-3) unstable; urgency=medium
* Upload to unstable
diff -Nru ldb-1.5.1+really1.4.6/debian/gitlab-ci.yml ldb-1.5.1+really1.4.7/debian/gitlab-ci.yml
--- ldb-1.5.1+really1.4.6/debian/gitlab-ci.yml 2019-03-20 06:05:39.000000000 +0100
+++ ldb-1.5.1+really1.4.7/debian/gitlab-ci.yml 2019-07-07 08:53:58.000000000 +0200
@@ -1,16 +1,3 @@
-include: https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
-
-build:
- extends: .build-unstable
-
-reprotest:
- extends: .test-reprotest
-
-lintian:
- extends: .test-lintian
-
-autopkgtest:
- extends: .test-autopkgtest
-
-piuparts:
- extends: .test-piuparts
\ Pas de fin de ligne à la fin du fichier
+include:
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
+ - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
diff -Nru ldb-1.5.1+really1.4.6/debian/libldb1.symbols ldb-1.5.1+really1.4.7/debian/libldb1.symbols
--- ldb-1.5.1+really1.4.6/debian/libldb1.symbols 2019-03-20 07:26:49.000000000 +0100
+++ ldb-1.5.1+really1.4.7/debian/libldb1.symbols 2019-07-07 10:06:36.000000000 +0200
@@ -60,6 +60,7 @@
LDB_1.4.4@LDB_1.4.4 2:1.4.4
LDB_1.4.5@LDB_1.4.5 2:1.4.5
LDB_1.4.6@LDB_1.4.6 2:1.4.6
+ LDB_1.4.7@LDB_1.4.7 2:1.4.7
ldb_check_critical_controls@LDB_0.9.22 0.9.22
ldb_controls_except_specified@LDB_0.9.22 0.9.22
ldb_control_to_string@LDB_1.0.2 1.0.2~git20110403
diff -Nru ldb-1.5.1+really1.4.6/debian/python-ldb.symbols ldb-1.5.1+really1.4.7/debian/python-ldb.symbols
--- ldb-1.5.1+really1.4.6/debian/python-ldb.symbols 2019-03-20 07:26:49.000000000 +0100
+++ ldb-1.5.1+really1.4.7/debian/python-ldb.symbols 2019-07-07 10:06:36.000000000 +0200
@@ -48,5 +48,6 @@
PYLDB_UTIL_1.4.4@PYLDB_UTIL_1.4.4 2:1.4.4
PYLDB_UTIL_1.4.5@PYLDB_UTIL_1.4.5 2:1.4.5
PYLDB_UTIL_1.4.6@PYLDB_UTIL_1.4.6 2:1.4.6
+ PYLDB_UTIL_1.4.7@PYLDB_UTIL_1.4.7 2:1.4.7
pyldb_Dn_FromDn@PYLDB_UTIL_1.1.2 1.1.2~
pyldb_Object_AsDn@PYLDB_UTIL_1.1.2 1.1.2~
diff -Nru ldb-1.5.1+really1.4.6/include/ldb_module.h ldb-1.5.1+really1.4.7/include/ldb_module.h
--- ldb-1.5.1+really1.4.6/include/ldb_module.h 2019-02-14 12:20:56.000000000 +0100
+++ ldb-1.5.1+really1.4.7/include/ldb_module.h 2019-07-03 12:32:42.000000000 +0200
@@ -104,6 +104,11 @@
#define LDB_SECRET_ATTRIBUTE_LIST_OPAQUE "LDB_SECRET_ATTRIBUTE_LIST"
/*
+ * The scheme to be used for referral entries, i.e. ldap or ldaps
+ */
+#define LDAP_REFERRAL_SCHEME_OPAQUE "LDAP_REFERRAL_SCHEME"
+
+/*
these function pointers define the operations that a ldb module can intercept
*/
struct ldb_module_ops {
diff -Nru ldb-1.5.1+really1.4.6/wscript ldb-1.5.1+really1.4.7/wscript
--- ldb-1.5.1+really1.4.6/wscript 2019-02-26 16:13:42.000000000 +0100
+++ ldb-1.5.1+really1.4.7/wscript 2019-07-03 12:32:42.000000000 +0200
@@ -1,7 +1,7 @@
#!/usr/bin/env python
APPNAME = 'ldb'
-VERSION = '1.4.6'
+VERSION = '1.4.7'
blddir = 'bin'
[The following lists of changes regard files as different if they have
different names, permissions or owners.]
Files in second .changes but not in first
-----------------------------------------
-rw-r--r-- root/root /usr/lib/debug/.build-id/06/dc798eb8068792e48e151afd1a6984a5084cdb.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/0d/4d0994850057cb7113d9c70d61aaccf421ba65.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/13/f43f5df2d04de6ff9ecb6b7253f91fb7e989b9.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/27/c58b973fc9420fa5d4d92363ba9b31e54bad83.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/3b/f621da82fa5b69957563f2b1d6ff982bde62ac.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/45/a8cb1525cb351252230f72f90f2781e6018ac7.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/60/bec089ffc3f08de365b9ea18ca1a703b2720e1.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/64/dc3b7e74027934555fd36f4f8f0f73f98c7517.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/6f/c8ce75f79bfc681a44f8746d7a217f24859a9f.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/73/bb28294a72b22e45941e48220f6058e978286c.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/91/efca25bac87db2f24f940c3505e95c5b714a4a.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/98/0c86798695bfb7394a303dc63a6048e8b68d49.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/a4/bcf0c1aec55b7b11d20b79ec6fe4ce92ca4cd6.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/b0/d2923139a4e45a388bf049a03d9717391ba474.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/b8/3d5e049047f4dcefa45a5113b3dcb7b0ce2d91.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/c1/353ff97f851802145f5fd7891f7fd837d0265d.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/c2/403075454889fe6ec4acbf7169afa71138c8f0.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/cb/08af18627aa03d967dfda62d702110d48d3a47.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/e3/15717766a900107f8333b5b7d1934468663de7.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/e8/67075843ad626174ee1107f48a6a1ae317ca05.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/ef/df040811861ebaa76dc15f82516e7d9a3fca2d.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/f9/d7a326c170be96e232adef34852eb436abcd37.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/fc/aa9b703e3772a0868daadb93563c2f0ab41712.debug
-rw-r--r-- root/root /usr/lib/x86_64-linux-gnu/libldb.so.1.4.7
-rw-r--r-- root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so.1.4.7
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libldb.so -> libldb.so.1.4.7
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libldb.so.1 -> libldb.so.1.4.7
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so -> libpyldb-util.so.1.4.7
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so.1 -> libpyldb-util.so.1.4.7
Files in first .changes but not in second
-----------------------------------------
-rw-r--r-- root/root /usr/lib/debug/.build-id/01/a90713b4bfb63b06c6927e30fc311391aa2c3b.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/1b/5163b9a4749328f40536ce09a84c27e749ed23.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/20/bca4773c4b42b8169a521a52fa3e934bfb1415.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/42/7b522548ddb21a7eac8fbf80d2925b404ebfc7.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/5e/1e6822534fb7fb3a5ba1c093010f3bfa0035d6.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/64/4ea806d9b06b1fe5d800907628e3e092ca05c4.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/6a/3e7a96ed6fd7a583682f97d89bc15355203285.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/71/d11dadd61bfe302e65e37c8a8317a23c87e857.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/72/bbd336d6bbdc9dd8520b4170154e30d168498c.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/7d/f75a85c493502892cee3bba91c2460a509611d.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/85/cf7f546f06794607b0cd04629087659f5316c1.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/87/bcd7869aff4fb8bef7f77b9e54f143bb9d2e5b.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/9c/09d92dd3d70d5eb9b3c4817f72c52fbb5d0290.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/bc/4bfa564a888da677bcb965dd195a9e20be7725.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/be/92d6f57215e6bc5e03acd7cf29a6a83641779a.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/c1/05fdc631b39211a88056b007565592f144fd9b.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/c2/fa75a5c69e55c80a1c5f50021837eb36959b18.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/c8/900977805099a14b5e3c69864d8278911aadb4.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/e5/d8bcba3c4d37d67dddf0abf956fce31d63db2f.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/f0/7059b6ba9275435af7a71c52a3b9137f9280ba.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/f1/8ee89c5b29a6dcd0dabe3632d05c9c49b00bf8.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/f4/ad24535b6089509fb096d8d47be07236864c7f.debug
-rw-r--r-- root/root /usr/lib/debug/.build-id/ff/804a30c3e7af7cb489b67c47676ac52f0b46eb.debug
-rw-r--r-- root/root /usr/lib/x86_64-linux-gnu/libldb.so.1.4.6
-rw-r--r-- root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so.1.4.6
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libldb.so -> libldb.so.1.4.6
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libldb.so.1 -> libldb.so.1.4.6
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so -> libpyldb-util.so.1.4.6
lrwxrwxrwx root/root /usr/lib/x86_64-linux-gnu/libpyldb-util.so.1 -> libpyldb-util.so.1.4.6
Control files of package ldb-tools: lines which differ (wdiff format)
---------------------------------------------------------------------
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package ldb-tools-dbgsym: lines which differ (wdiff format)
----------------------------------------------------------------------------
Build-Ids: [-01a90713b4bfb63b06c6927e30fc311391aa2c3b 1b5163b9a4749328f40536ce09a84c27e749ed23 6a3e7a96ed6fd7a583682f97d89bc15355203285 72bbd336d6bbdc9dd8520b4170154e30d168498c 7df75a85c493502892cee3bba91c2460a509611d c2fa75a5c69e55c80a1c5f50021837eb36959b18 c8900977805099a14b5e3c69864d8278911aadb4-] {+06dc798eb8068792e48e151afd1a6984a5084cdb 27c58b973fc9420fa5d4d92363ba9b31e54bad83 980c86798695bfb7394a303dc63a6048e8b68d49 b0d2923139a4e45a388bf049a03d9717391ba474 b83d5e049047f4dcefa45a5113b3dcb7b0ce2d91 cb08af18627aa03d967dfda62d702110d48d3a47 e315717766a900107f8333b5b7d1934468663de7+}
Depends: ldb-tools (= [-2:1.5.1+really1.4.6-3)-] {+2:1.5.1+really1.4.7-1)+}
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package libldb-dev: lines which differ (wdiff format)
----------------------------------------------------------------------
Depends: libc6-dev, libldb1 (= [-2:1.5.1+really1.4.6-3),-] {+2:1.5.1+really1.4.7-1),+} libtalloc-dev, libtdb-dev, pkg-config
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package libldb1: lines which differ (wdiff format)
-------------------------------------------------------------------
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package libldb1-dbgsym: lines which differ (wdiff format)
--------------------------------------------------------------------------
Build-Ids: [-20bca4773c4b42b8169a521a52fa3e934bfb1415 427b522548ddb21a7eac8fbf80d2925b404ebfc7 5e1e6822534fb7fb3a5ba1c093010f3bfa0035d6 644ea806d9b06b1fe5d800907628e3e092ca05c4 85cf7f546f06794607b0cd04629087659f5316c1 87bcd7869aff4fb8bef7f77b9e54f143bb9d2e5b bc4bfa564a888da677bcb965dd195a9e20be7725 be92d6f57215e6bc5e03acd7cf29a6a83641779a c105fdc631b39211a88056b007565592f144fd9b e5d8bcba3c4d37d67dddf0abf956fce31d63db2f f07059b6ba9275435af7a71c52a3b9137f9280ba f18ee89c5b29a6dcd0dabe3632d05c9c49b00bf8 f4ad24535b6089509fb096d8d47be07236864c7f ff804a30c3e7af7cb489b67c47676ac52f0b46eb-] {+0d4d0994850057cb7113d9c70d61aaccf421ba65 3bf621da82fa5b69957563f2b1d6ff982bde62ac 45a8cb1525cb351252230f72f90f2781e6018ac7 60bec089ffc3f08de365b9ea18ca1a703b2720e1 64dc3b7e74027934555fd36f4f8f0f73f98c7517 6fc8ce75f79bfc681a44f8746d7a217f24859a9f 73bb28294a72b22e45941e48220f6058e978286c 91efca25bac87db2f24f940c3505e95c5b714a4a a4bcf0c1aec55b7b11d20b79ec6fe4ce92ca4cd6 c1353ff97f851802145f5fd7891f7fd837d0265d c2403075454889fe6ec4acbf7169afa71138c8f0 efdf040811861ebaa76dc15f82516e7d9a3fca2d f9d7a326c170be96e232adef34852eb436abcd37 fcaa9b703e3772a0868daadb93563c2f0ab41712+}
Depends: libldb1 (= [-2:1.5.1+really1.4.6-3)-] {+2:1.5.1+really1.4.7-1)+}
Installed-Size: [-564-] {+565+}
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package python-ldb: lines which differ (wdiff format)
----------------------------------------------------------------------
Depends: libldb1 (= [-2:1.5.1+really1.4.6-3),-] {+2:1.5.1+really1.4.7-1),+} python (<< 2.8), python (>= 2.7~), python:any (<< 2.8), python:any (>= 2.7~), libc6 (>= 2.4), libpython2.7 (>= 2.7), libtalloc2 (>= 2.0.4~git20101213)
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package python-ldb-dbgsym: lines which differ (wdiff format)
-----------------------------------------------------------------------------
Build-Ids: [-71d11dadd61bfe302e65e37c8a8317a23c87e857 9c09d92dd3d70d5eb9b3c4817f72c52fbb5d0290-] {+13f43f5df2d04de6ff9ecb6b7253f91fb7e989b9 e867075843ad626174ee1107f48a6a1ae317ca05+}
Depends: python-ldb (= [-2:1.5.1+really1.4.6-3)-] {+2:1.5.1+really1.4.7-1)+}
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
Control files of package python-ldb-dev: lines which differ (wdiff format)
--------------------------------------------------------------------------
Depends: libc6-dev, libldb-dev, pkg-config, python-ldb (= [-2:1.5.1+really1.4.6-3)-] {+2:1.5.1+really1.4.7-1)+}
Version: [-2:1.5.1+really1.4.6-3-] {+2:1.5.1+really1.4.7-1+}
==============================
Release Notes for Samba 4.9.11
July 03, 2019
==============================
This is the latest stable release of the Samba 4.9 release series.
In yesterday's Samba 4.9.10 release, LDAP_REFERRAL_SCHEME_OPAQUE was added to
db_module.h in order to fix bug #12478. Unfortunately, the ldb version was not
raised. Samba >= 4.9.10 is no longer able to build with ldb 1.4.6. This version
includes the new ldb version. Please note that there are just the version bumps
in ldb and Samba, no code change. If you don't build Samba with an external ldb
library, you can ignore this release and keep using 4.9.11.
Changes since 4.9.10:
---------------------
o Stefan Metzmacher <metze@samba.org>
* BUG 12478: ldb: Release ldb 1.4.7.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
Release notes for older releases follow:
----------------------------------------
==============================
Release Notes for Samba 4.9.10
July 02, 2019
==============================
This is the latest stable release of the Samba 4.9 release series.
Changes since 4.9.9:
--------------------
o Jeremy Allison <jra@samba.org>
* BUG 13938: s3: SMB1: Don't allow recvfile on stream fsp's.
* BUG 13956: s3: winbind: Fix crash when invoking winbind idmap scripts.
* BUG 13964: smbd does not correctly parse arguments passed to dfree and
quota scripts.
o Andrew Bartlett <abartlet@samba.org>
* BUG 13981: docs: Improve documentation of "lanman auth" and "ntlm auth"
connection.
o Björn Baumbach <bb@sernet.de>
* BUG 14002: python/ntacls: Use correct "state directory" smb.conf option
instead of "state dir".
o Ralph Boehme <slow@samba.org>
* BUG 13840: registry: Add a missing include.
* BUG 13938: s3:smbd: Don't use recvfile on streams.
* BUG 13944: SMB guest authentication may fail.
* BUG 13958: AppleDouble conversion breaks Resourceforks.
* BUG 13964: s3: lib: Rename all uses of file_pload_XXX -> file_ploadv_XXX.
* BUG 13968: vfs_fruit makes direct use of syscalls like mmap() and pread().
* BUG 13987: s3:mdssvc: Fix flex compilation error.
o Günther Deschner <gd@samba.org>
* BUG 13872: s3/vfs_glusterfs[_fuse]: Avoid using NAME_MAX directly.
o David Disseldorp <ddiss@samba.org>
* BUG 13940: vfs_ceph: Fix cephwrap_flistxattr() debug message.
o Aaron Haslett <aaronhaslett@catalyst.net.nz>
* BUG 13799: dsdb:samdb: Schemainfo update with relax control.
o Amitay Isaacs <amitay@gmail.com>
* BUG 13943: ctdb-common: Fix memory leak in run_proc.
o Aliaksei Karaliou <akaraliou@panasas.com>
* BUG 13964: smbd does not correctly parse arguments passed to dfree and
quota scripts.
o Volker Lendecke <vl@samba.org>
* BUG 13903: winbind: Fix overlapping id ranges.
* BUG 13957: smbd: Fix a panic.
o Gary Lockyer <gary@catalyst.net.nz>
* BUG 12478: ldap server: Generate correct referral schemes.
* BUG 13902: lib util debug: Increase format buffer to 4KiB.
* BUG 13941: Fix use after free detected by AddressSanitizer.
* BUG 13942: s4 dsdb: Fix use after free in
samldb_rename_search_base_callback.
o Stefan Metzmacher <metze@samba.org>
* BUG 12204: Samba fails to replicate schema 69.
* BUG 13713: Schema replication fails if link crosses chunk boundary
backwards.
* BUG 13799: 'samba-tool domain schemaupgrade' uses relax control and skips
the schemaInfo update.
* BUG 13916: dsdb:audit_log: avoid printing "... remote host [Unknown] SID
[(NULL SID)] ...".
* BUG 13917: python/ntacls: We only need security.SEC_STD_READ_CONTROL in
order to get the ACL.
* BUG 13919: smbd: Implement SMB_FILE_NORMALIZED_NAME_INFORMATION handling.
o Shyamsunder Rathi <shyam.rathi@nutanix.com>
* BUG 13947: s3:loadparm: Ensure to truncate FS Volume Label at multibyte
boundary.
o Robert Sander <r.sander@heinlein-support.de>
* BUG 13918: s3: modules: ceph: Use current working directory instead of
share path.
o Christof Schmitt <cs@samba.org>
* BUG 13831: Fix inconsistent output from wbinfo --sid-to-name depending on
cache state.
o Andreas Schneider <asn@samba.org>
* BUG 13937: Fix several issues detected by GCC 9.
* BUG 13939: s3:smbspool: Fix regression printing with Kerberos credentials.
o Martin Schwenke <martin@meltin.net>
* BUG 13923: ctdb-tools: Fix ctdb dumpmemory to avoid printing trailing NUL.
* BUG 13930: ctdb-daemon: Never use 0 as a client ID.
* BUG 13943: ctdb-common: Fix memory leak.
o Rafael David Tinoco <rafaeldtinoco@ubuntu.com>
* BUG 13984: ctdb-scripts: Fix tcp_tw_recycle existence check.
o Ralph Wuerthner <ralph.wuerthner@de.ibm.com>
* BUG 13904: Log early startup failures.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
=============================
Release Notes for Samba 4.9.9
June 19, 2019
=============================
This is a security release in order to address the following defect:
o CVE-2019-12435 (Samba AD DC Denial of Service in DNS management server
(dnsserver))
=======
Details
=======
o CVE-2019-12435:
An authenticated user can crash the Samba AD DC's RPC server process via a
NULL pointer dereference.
For more details and workarounds, please refer to the security advisory.
Changes since 4.9.8:
--------------------
o Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* BUG 13922: CVE-2019-12435 rpc/dns: Avoid NULL deference if zone not found
in DnssrvOperation2.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
----------------------------------------------------------------------
=============================
Release Notes for Samba 4.9.8
May 14, 2019
=============================
This is a security release in order to address the following defect:
o CVE-2018-16860 (Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum)
=======
Details
=======
o CVE-2018-16860:
The checksum validation in the S4U2Self handler in the embedded Heimdal KDC
did not first confirm that the checksum was keyed, allowing replacement of
the requested target (client) principal.
For more details and workarounds, please refer to the security advisory.
Changes since 4.9.7:
--------------------
o Isaac Boukris <iboukris@gmail.com>
* BUG 13685: CVE-2018-16860: Heimdal KDC: Reject PA-S4U2Self with unkeyed
checksum.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
----------------------------------------------------------------------
=============================
Release Notes for Samba 4.9.7
May 1, 2019
=============================
This is the latest stable release of the Samba 4.9 release series.
Changes since 4.9.6:
--------------------
o Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
* BUG 13837: py/kcc_utils: py2.6 compatibility.
* BUG 13882: py/provision: Fix for Python 2.6.
o Andrew Bartlett <abartlet@samba.org>
* BUG 13840: regfio: Update code near recent changes to match README.Coding.
o Günther Deschner <gd@samba.org>
* BUG 13861: 'net ads join' to child domain fails when using
"-U admin@forestroot".
o David Disseldorp <ddiss@samba.org>
* BUG 13858: vfs_snapper: Drop unneeded fstat handler.
* BUG 13896: vfs_ceph: Explicitly enable libcephfs POSIX ACL support.
o Philipp Gesang <philipp.gesang@intra2net.com>
* BUG 13869: libcli: Permit larger values of DataLength in
SMB2_ENCRYPTION_CAPABILITIES of negotiate response.
o Michael Hanselmann <public@hansmi.ch>
* BUG 13840: regfio: Improve handling of malformed registry hive files.
o Amitay Isaacs <amitay@samba.org>
* BUG 13895: ctdb-common: Avoid race between fd and signal events.
o Volker Lendecke <vl@samba.org>
* BUG 13813: Fix idmap cache pollution with S-1-22- IDs on winbind hickup.
o Marcos Mello <marcosfrm@gmail.com>
* BUG 11568: Send status to systemd on daemon start.
o Stefan Metzmacher <metze@samba.org>
* BUG 10097: s3:smbd: Handle IO_REPARSE_TAG_DFS in
SMB_FIND_FILE_FULL_DIRECTORY_INFO.
* BUG 10344: smb2_tcon: Avoid STATUS_PENDING completely on tdis.
* BUG 12844: smb2_tcon: Avoid STATUS_PENDING responses for tree connect.
* BUG 12845: smb2_sesssetup: Avoid STATUS_PENDING responses for session
setup.
* BUG 13698: smb2_tcon: Avoid STATUS_PENDING responses for tree connect.
* BUG 13796: smb2_sesssetup: Avoid STATUS_PENDING responses for session
setup.
* BUG 13816: dbcheck in the middle of the tombstone garbage collection causes
replication failures.
* BUG 13818: ndr_spoolss_buf: Fix out of scope use of stack variable in
NDR_SPOOLSS_PUSH_ENUM_OUT().
* BUG 13862: vfs_default: Fix vfswrap_offload_write_send()
NT_STATUS_INVALID_VIEW_SIZE check.
* BUG 13863: smb2_server: Grant all 8192 credits to clients.
o Noel Power <noel.power@suse.com>
* python/samba: extra ndr_unpack needs bytes function
o Anoop C S <anoopcs@redhat.com>
* BUG 13872: s3/vfs_glusterfs[_fuse]: Dynamically determine NAME_MAX.
o Christof Schmitt <cs@samba.org>
* passdb: Update ABI to 0.27.2.
* BUG 13813: lib/winbind_util: Add winbind_xid_to_sid for --without-winbind.
* BUG 13865: memcache: Increase size of default memcache to 512k.
o Andreas Schneider <asn@samba.org>
* BUG 13823: lib:util: Move debug message for mkdir failing to log level 1.
* BUG 13832: Printing via smbspool backend with Kerberos auth fails.
* BUG 13847: s4:librpc: Fix installation of Samba.
* BUG 13848: s3:lib: Fix the debug message for adding cache entries.
* BUG 13853: s3:waf: Fix the detection of makdev() macro on Linux.
* BUG 13857: docs: Update smbclient manpage for --max-protocol.
* BUG 13861: 'net ads join' to child domain fails when using
"-U admin@forestroot".
o Zhu Shangzhong <zhu.shangzhong@zte.com.cn>
* BUG 13839: ctdb: Initialize addr struct to zero before reparsing as IPV4.
o Martin Schwenke <martin@meltin.net>
* BUG 13838: ctdb package should not own system library directory.
* BUG 13860: CTDB restarts failed NFS RPC services by hand, which is
incompatible with systemd.
* BUG 13888: ctdb-daemon: Revert "We can not assume that just because we
could complete a TCP handshake".
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
----------------------------------------------------------------------
=============================
Release Notes for Samba 4.9.6
April 8, 2019
=============================
This is a security release in order to address the following defects:
o CVE-2019-3870 (World writable files in Samba AD DC private/ dir)
o CVE-2019-3880 (Save registry file outside share as unprivileged user)
=======
Details
=======
o CVE-2019-3870:
During the provision of a new Active Directory DC, some files in the private/
directory are created world-writable.
o CVE-2019-3880:
Authenticated users with write permission can trigger a symlink traversal to
write or detect files outside the Samba share.
For more details and workarounds, please refer to the security advisories.
Changes since 4.9.5:
--------------------
o Andrew Bartlett <abartlet@samba.org>
* BUG 13834: CVE-2019-3870: pysmbd: Ensure a zero umask is set for
smbd.mkdir().
o Jeremy Allison <jra@samba.org>
* BUG 13851: CVE-2018-14629: rpc: winreg: Remove implementations of
SaveKey/RestoreKey.
#######################################
Reporting bugs & Development Discussion
#######################################
Please discuss this release on the samba-technical mailing list or by
joining the #samba-technical IRC channel on irc.freenode.net.
If you do report problems then please try to send high quality
feedback. If you don't provide vital information to help us track down
the problem then you will probably be ignored. All bug reports should
be filed under the "Samba 4.1 and newer" product in the project's Bugzilla
database (https://bugzilla.samba.org/).
======================================================================
== Our Code, Our Bugs, Our Responsibility.
== The Samba Team
======================================================================
diff --git a/debian/changelog b/debian/changelog
index fd9f866c813..449df9dda9b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,28 @@
+samba (2:4.9.11+dfsg-1) unstable; urgency=medium
+
+ [ Mathieu Parent ]
+ * New upstream release
+ - Bump ldb Build-Depends to 2:1.5.1+really1.4.7
+ - Fixes printing via smbspool backend with kerberos auth (Closes: #931481)
+ - Drop security patches, merged upstream
+ - libsamba-passdb.so bumped to 0.27.2
+ * Enable vfs_nfs4acl_xattr (Closes: #930540)
+
+ [ Rafael David Tinoco ]
+ * debian/rules: Make DEB_HOST_ARCH_CPU initialized through dpkg-architecture
+ (Closes: #931138)
+ * CTDB NFS fixes (Closes: #929931, LP: #722201):
+ - d/p/fix-nfs-service-name-to-nfs-kernel-server.patch: change nfs service
+ name from nfs to nfs-kernel-server
+ - ctdb-config: depend on /etc/ctdb/nodes file
+ - d/ctdb.install, d/rules: create ctdb run directory into tmpfiles.d to
+ allow pid file to exist
+ - added /var/lib/ctdb/* directories
+ - d/ctdb.postrm: remove leftovers from /var/lib/ctdb/*
+ - Add examples of NFS HA CTDB config files + helper script
+
+ -- Mathieu Parent <sathieu@debian.org> Mon, 08 Jul 2019 09:56:36 +0200
+
samba (2:4.9.5+dfsg-5) unstable; urgency=high
* This is a security release in order to address the following defect:
diff --git a/debian/control b/debian/control
index c639c0640cf..2c4f4a40dd3 100644
--- a/debian/control
+++ b/debian/control
@@ -32,7 +32,7 @@ Build-Depends: bison,
libgpgme11-dev,
libjansson-dev,
libldap2-dev,
- libldb-dev (>= 2:1.5.1+really1.4.6),
+ libldb-dev (>= 2:1.5.1+really1.4.7),
libncurses5-dev,
libpam0g-dev,
libparse-yapp-perl,
@@ -48,8 +48,8 @@ Build-Depends: bison,
po-debconf,
python-all-dev (>= 2.6.6-3),
python-dnspython,
- python-ldb (>= 2:1.5.1+really1.4.6),
- python-ldb-dev (>= 2:1.5.1+really1.4.6),
+ python-ldb (>= 2:1.5.1+really1.4.7),
+ python-ldb-dev (>= 2:1.5.1+really1.4.7),
python-talloc-dev (>= 2.1.14~),
python-tdb (>= 1.3.16~),
python-testtools,
diff --git a/debian/ctdb.dirs b/debian/ctdb.dirs
index 2c65b74b4aa..3907a72db3e 100644
--- a/debian/ctdb.dirs
+++ b/debian/ctdb.dirs
@@ -1 +1,5 @@
var/log/ctdb
+var/lib/ctdb
+var/lib/ctdb/persistent
+var/lib/ctdb/state
+var/lib/ctdb/volatile
diff --git a/debian/ctdb.example.enable.nfs.sh b/debian/ctdb.example.enable.nfs.sh
new file mode 100755
index 00000000000..2a990747e56
--- /dev/null
+++ b/debian/ctdb.example.enable.nfs.sh
@@ -0,0 +1,196 @@
+#!/bin/bash -e
+
+base="/usr/share/doc/ctdb/examples/nfs-kernel-server/"
+logfile="/tmp/enable-ctdb-nfs.$$.log" ; touch $logfile ;
+ghostname=""
+
+# functions ---------
+
+die() { echo error: $@; echo ; exit 1; };
+getout() { echo exit: $@; echo ; exit 0; };
+stopservice() { echo stopping $1... ; systemctl stop $1 2>&1 >> $logfile 2>&1; }
+disableservice() { echo disabling $1... ; systemctl disable $1 2>&1 >> $logfile 2>&1; }
+startservice() { echo starting $1... ; systemctl start $1 2>&1 >> $logfile 2>&1; }
+sysctlrefresh() { echo refreshing sysctl... ; sysctl --system 2>&1 >> $logfile 2>&1; }
+
+backupfile() {
+ echo backing up $1
+ [ -f $1.prvctdb ] && die "backup file $1 already exists!"
+ [ -f $1 ] && cp $1 $1.prvctdb || true
+}
+
+checkservice() {
+ (systemctl list-unit-files | grep -q $1.service) || die "service $1 not found"
+}
+
+replacefile() {
+
+ origfile=$1
+ replfile=$2
+
+
+ [ ! -f $base/$origfile ] && die "coult not find $base/$origfile"
+
+ echo replacing $replfile...
+ cp $base/$origfile $replfile
+}
+
+appendfile() {
+
+ origfile=$1
+ replfile=$2
+
+ [ ! -f $base/$origfile ] && die "coult not find $base/$origfile"
+
+ echo appending $base/$origfile to $replfile...
+ cat $base/$origfile >> $replfile
+}
+
+appendnfsenv() {
+
+ file=$1 ; [ -f $file ] || die "inexistent file $file";
+
+ echo appending NFS_HOSTNAME to $file...
+
+ grep -q "NFS_HOSTNAME" $file || \
+ {
+ echo
+ echo "echo NFS_HOSTNAME=\\\"\$NFS_HOSTNAME\\\"" \>\> \/run\/sysconfig\/nfs-utils
+ echo
+ } >> $file
+}
+
+execnfsenv() {
+
+ file=$1 ; [ -f $file ] || due "inexistent file $file";
+
+ echo executing $file...
+
+ $file 2>&1 >> $logfile 2>&1;
+}
+
+fixnfshostname() {
+
+ file=$1 ; [ -f $file ] || due "inexistent file $file";
+
+ if [ "$ghostname" == "" ]; then
+ echo "What is the FQDN for the public IP address of this host ?"
+ echo -n "> "
+ read ghostname
+ fi
+
+ echo placing hostname $ghostname into $file...
+ sed -i "s:PLACE_HOSTNAME_HERE:$ghostname:g" $file
+}
+
+# end of functions --
+
+[ $UID != 0 ] && die "you need root privileges"
+
+echo """
+This script will enable CTDB NFS HA by changing the following files:
+
+(1) /etc/default/nfs-common ( replace )
+(2) /etc/default/nfs-kernel-server ( replace )
+(3) /etc/services ( append )
+(4) /etc/sysctl.d/99-nfs-static-ports.conf ( create )
+(5) /usr/lib/systemd/scripts/nfs-utils_env.sh ( modify )
+
+and disabling the following services:
+
+(1) rpcbind
+(2) nfs-kernel-server
+(3) rpc.rquotad
+
+Obs:
+ - replaced files keep previous versions as "file".prevctdb
+ - dependant services will also be stopped
+"""
+
+while true; do
+ echo -n "Do you agree with this change ? (N/y) => "
+ read answer
+ [ "$answer" == "n" ] && getout "exiting without any changes"
+ [ "$answer" == "y" ] && break
+done
+
+
+echo "checking requirements..."
+
+checkservice nfs-kernel-server
+checkservice quota
+checkservice rpcbind
+
+echo "requirements okay!"
+echo
+
+backupfile /etc/default/nfs-common
+backupfile /etc/default/nfs-kernel-server
+backupfile /etc/services
+backupfile /usr/lib/systemd/scripts/nfs-utils_env.sh
+echo
+
+set +e
+
+stopservice ctdb.service
+stopservice quota.service
+stopservice nfs-kernel-server.service
+stopservice rpcbind.service
+stopservice rpcbind.socket
+stopservice rpcbind.target
+echo
+
+disableservice ctdb.service
+disableservice quota.service
+disableservice nfs-kernel-server.service
+disableservice rpcbind.service
+disableservice rpcbind.socket
+disableservice rpcbind.target
+echo
+
+set -e
+
+replacefile nfs-common /etc/default/nfs-common
+replacefile nfs-kernel-server /etc/default/nfs-kernel-server
+replacefile 99-nfs-static-ports.conf /etc/sysctl.d/99-nfs-static-ports.conf
+echo
+
+appendfile services /etc/services
+echo
+
+fixnfshostname /etc/default/nfs-common
+fixnfshostname /etc/default/nfs-kernel-server
+echo
+
+appendnfsenv /usr/lib/systemd/scripts/nfs-utils_env.sh
+execnfsenv /usr/lib/systemd/scripts/nfs-utils_env.sh
+echo
+
+sysctlrefresh
+echo
+
+echo """Finished! Make sure to configure properly:
+
+ - /etc/exports (containing the clustered fs to be exported)
+ - /etc/ctdb/nodes (containing all your node private IPs)
+ - /etc/ctdb/public_addressess (containing public addresses)
+
+A log file can be found at:
+
+ - /tmp/enable-ctdb-nfs.$$.log
+
+Remember:
+
+ - to place a recovery lock in /etc/ctdb/ctdb.conf:
+ ...
+ [cluster]
+ recovery lock = /clustered.filesystem/.reclock
+ ...
+
+And, make sure you enable ctdb service again:
+
+ - systemctl enable ctdb.service
+ - systemctl start ctdb.service
+
+Enjoy!
+"""
diff --git a/debian/ctdb.example.nfs-common b/debian/ctdb.example.nfs-common
new file mode 100644
index 00000000000..9d4f22ccedf
--- /dev/null
+++ b/debian/ctdb.example.nfs-common
@@ -0,0 +1,19 @@
+# CTDB: /etc/default/nfs-common for clustering
+
+NFS_HOSTNAME="PLACE_HOSTNAME_HERE"
+
+# rpc.statd - daemon listening for reboot notifications (locks related)
+NEED_STATD="yes"
+STATDOPTS="-n ${NFS_HOSTNAME} -p 32765 -o 32766 -H /etc/ctdb/statd-callout -T 32768 -U 32768"
+STATD_HOSTNAME="$NFS_HOSTNAME"
+
+# rpc.gssd - security context for rpc connections
+NEED_GSSD="no"
+
+# rpc.idmapd - NFSv4 <-> name mapping daemon (fallback nowadays)
+# recent kernels use nfsidmap(8) instead
+NEED_IDMAPD="no"
+
+# rpc.quota - usage quota
+RPCRQUOTADOPTS="-p 32769"
+
diff --git a/debian/ctdb.example.nfs-kernel-server b/debian/ctdb.example.nfs-kernel-server
new file mode 100644
index 00000000000..6aa5df9ee07
--- /dev/null
+++ b/debian/ctdb.example.nfs-kernel-server
@@ -0,0 +1,16 @@
+# CTDB: /etc/default/nfs-kernel-server for clustering
+
+NFS_HOSTNAME="PLACE_HOSTNAME_HERE"
+
+# rpc.nfsd - user level part of nfs service (kernel: nfsd module)
+RPCNFSDPRIORITY=0
+RPCNFSDCOUNT=8
+RPCNFSDOPTS="-N 4"
+
+# rpc.mountd - server side of nfs mount protocol
+RPCMOUNTDOPTS="-p 32767 --manage-gids --no-nfs-version 4"
+
+# rpc.svcgssd - userspace daemon to handle sec context for kernel rpcsec_gss
+NEED_SVCGSSD="no"
+RPCSVCGSSDOPTS=""
+
diff --git a/debian/ctdb.example.services b/debian/ctdb.example.services
new file mode 100644
index 00000000000..3ff6b1de58e
--- /dev/null
+++ b/debian/ctdb.example.services
@@ -0,0 +1,16 @@
+# CTDB: fixed NFS/RPC service ports for clustering
+
+rpc.nfsd 2049/tcp # RPC nfsd
+rpc.nfsd 2049/udp # RPC nfsd
+rpc.nfs-cb 32764/tcp # RPC nfs callback
+rpc.nfs-cb 32764/udp # RPC nfs callback
+rpc.statd-bc 32765/tcp # RPC statd broadcast
+rpc.statd-bc 32765/udp # RPC statd broadcast
+rpc.statd 32766/tcp # RPC statd listen
+rpc.statd 32766/udp # RPC statd listen
+rpc.mountd 32767/tcp # RPC mountd
+rpc.mountd 32767/udp # RPC mountd
+rpc.lockd 32768/tcp # RPC lockd/nlockmgr
+rpc.lockd 32768/udp # RPC lockd/nlockmgr
+rpc.quotad 32769/tcp # RPC quotad
+rpc.quotad 32769/udp # RPC quotad
diff --git a/debian/ctdb.example.sysctl-nfs-static-ports.conf b/debian/ctdb.example.sysctl-nfs-static-ports.conf
new file mode 100644
index 00000000000..7b83623d6a3
--- /dev/null
+++ b/debian/ctdb.example.sysctl-nfs-static-ports.conf
@@ -0,0 +1,5 @@
+# CTDB: /etc/sysctl.d/98-nfs-static-ports.conf
+
+fs.nfs.nfs_callback_tcpport = 32764
+fs.nfs.nlm_tcpport = 32768
+fs.nfs.nlm_udpport = 32768
\ No newline at end of file
diff --git a/debian/ctdb.install b/debian/ctdb.install
index 0412478d297..7e0997549fa 100755
--- a/debian/ctdb.install
+++ b/debian/ctdb.install
@@ -23,6 +23,7 @@ usr/lib/*/ctdb/ctdb_recovery_helper
usr/lib/*/ctdb/ctdb_takeover_helper
usr/lib/*/ctdb/smnotify
usr/lib/*/samba/libctdb-event-client.so.0
+usr/lib/tmpfiles.d/ctdb.conf
usr/sbin/ctdbd
usr/sbin/ctdbd_wrapper
usr/share/ctdb/events/legacy/*.script
diff --git a/debian/ctdb.postrm b/debian/ctdb.postrm
index 221c2bb8c14..3ba81db7d69 100644
--- a/debian/ctdb.postrm
+++ b/debian/ctdb.postrm
@@ -29,9 +29,22 @@ disable_legacy() { # From ctdb/packaging/RPM/ctdb.spec.in
fi
}
+remove_leftover() {
+
+ # Remove files created after initalization
+
+ rm -f /etc/ctdb/nodes
+ rm -f /etc/ctdb/public_addresses
+ rm -f /var/lib/ctdb/volatile/*
+ rm -f /var/lib/ctdb/state/*
+ rm -f /var/lib/ctdb/persistent/*
+ rm -rf /var/lib/ctdb/scripts
+}
+
case "$1" in
purge)
disable_legacy 0
+ remove_leftover
;;
remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
diff --git a/debian/patches/CVE-2018-16860-v4-9-06.patch b/debian/patches/CVE-2018-16860-v4-9-06.patch
deleted file mode 100644
index 71b04e38c55..00000000000
--- a/debian/patches/CVE-2018-16860-v4-9-06.patch
+++ /dev/null
@@ -1,1418 +0,0 @@
-From ffadbcbcd8c354ff3ab3f83f3394dd9ae911d100 Mon Sep 17 00:00:00 2001
-From: Isaac Boukris <iboukris@gmail.com>
-Date: Thu, 25 Apr 2019 22:12:10 +1200
-Subject: [PATCH 1/2] CVE-2018-16860 selftest: Add test for S4U2Self with
- unkeyed checksum
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13685
-
-Signed-off-by: Isaac Boukris <iboukris@gmail.com>
-Signed-off-by: Andrew Bartlett <abartlet@samba.org>
----
- selftest/knownfail.d/mitm-s4u2self | 576 +++++++++++++++++++++++++++++++
- source4/torture/krb5/kdc-canon-heimdal.c | 115 +++++-
- 2 files changed, 687 insertions(+), 4 deletions(-)
- create mode 100644 selftest/knownfail.d/mitm-s4u2self
-
-diff --git a/selftest/knownfail.d/mitm-s4u2self b/selftest/knownfail.d/mitm-s4u2self
-new file mode 100644
-index 00000000000..aacbd101867
---- /dev/null
-+++ b/selftest/knownfail.d/mitm-s4u2self
-@@ -0,0 +1,576 @@
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-+^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-diff --git a/source4/torture/krb5/kdc-canon-heimdal.c b/source4/torture/krb5/kdc-canon-heimdal.c
-index 5b782a23fc4..fdca1ca414c 100644
---- a/source4/torture/krb5/kdc-canon-heimdal.c
-+++ b/source4/torture/krb5/kdc-canon-heimdal.c
-@@ -43,7 +43,9 @@
- #define TEST_UPN 0x0000040
- #define TEST_S4U2SELF 0x0000080
- #define TEST_REMOVEDOLLAR 0x0000100
--#define TEST_ALL 0x00001FF
-+#define TEST_AS_REQ_SPN 0x0000200 /* not used */
-+#define TEST_MITM_S4U2SELF 0x0000400
-+#define TEST_ALL 0x00007FF
-
- struct test_data {
- const char *test_name;
-@@ -61,6 +63,7 @@ struct test_data {
- bool upn;
- bool other_upn_suffix;
- bool s4u2self;
-+ bool mitm_s4u2self;
- bool removedollar;
- const char *krb5_service;
- const char *krb5_hostname;
-@@ -209,6 +212,67 @@ static bool test_accept_ticket(struct torture_context *tctx,
- return true;
- }
-
-+krb5_error_code
-+_krb5_s4u2self_to_checksumdata(krb5_context context,
-+ const PA_S4U2Self *self,
-+ krb5_data *data);
-+
-+/* Helper function to modify the principal in PA_FOR_USER padata */
-+static bool change_for_user_principal(struct torture_krb5_context *test_context,
-+ krb5_data *modified_send_buf)
-+{
-+ PA_DATA *for_user;
-+ int i = 0;
-+ size_t used;
-+ krb5_error_code ret;
-+ PA_S4U2Self self, mod_self;
-+ krb5_data cksum_data;
-+ krb5_principal admin;
-+ heim_octet_string orig_padata_value;
-+ krb5_context k5_ctx = test_context->smb_krb5_context->krb5_context;
-+
-+ for_user = krb5_find_padata(test_context->tgs_req.padata->val,
-+ test_context->tgs_req.padata->len, KRB5_PADATA_FOR_USER, &i);
-+ torture_assert(test_context->tctx, for_user != NULL, "No PA_FOR_USER in s4u2self request");
-+ orig_padata_value = for_user->padata_value;
-+
-+ torture_assert_int_equal(test_context->tctx,
-+ krb5_make_principal(k5_ctx, &admin, test_context->test_data->realm,
-+ "Administrator", NULL),
-+ 0, "krb5_make_principal() failed");
-+ torture_assert_int_equal(test_context->tctx,
-+ decode_PA_S4U2Self(for_user->padata_value.data,
-+ for_user->padata_value.length, &self, NULL),
-+ 0, "decode_PA_S4U2Self() failed");
-+ mod_self = self;
-+ mod_self.name = admin->name;
-+
-+ torture_assert_int_equal(test_context->tctx,
-+ _krb5_s4u2self_to_checksumdata(k5_ctx, &mod_self, &cksum_data),
-+ 0, "_krb5_s4u2self_to_checksumdata() failed");
-+ torture_assert_int_equal(test_context->tctx,
-+ krb5_create_checksum(k5_ctx, NULL, KRB5_KU_OTHER_CKSUM,
-+ CKSUMTYPE_CRC32, cksum_data.data,
-+ cksum_data.length, &mod_self.cksum),
-+ 0, "krb5_create_checksum() failed");
-+
-+ ASN1_MALLOC_ENCODE(PA_S4U2Self, for_user->padata_value.data, for_user->padata_value.length,
-+ &mod_self, &used, ret);
-+ torture_assert(test_context->tctx, ret == 0, "Failed to encode PA_S4U2Self ASN1 struct");
-+ ASN1_MALLOC_ENCODE(TGS_REQ, modified_send_buf->data, modified_send_buf->length,
-+ &test_context->tgs_req, &used, ret);
-+ torture_assert(test_context->tctx, ret == 0, "Failed to encode TGS_REQ ASN1 struct");
-+
-+ free(for_user->padata_value.data);
-+ for_user->padata_value = orig_padata_value;
-+
-+ free_PA_S4U2Self(&self);
-+ krb5_data_free(&cksum_data);
-+ free_Checksum(&mod_self.cksum);
-+
-+ return true;
-+}
-+
- /*
- * TEST_AS_REQ and TEST_AS_REQ_SELF - SEND
- *
-@@ -598,7 +662,12 @@ static bool torture_krb5_pre_send_tgs_req_canon_test(struct torture_krb5_context
-
- }
-
-- *modified_send_buf = *send_buf;
-+ if (test_context->test_data->mitm_s4u2self) {
-+ torture_assert(test_context->tctx, change_for_user_principal(test_context, modified_send_buf),
-+ "Failed to modify PA_FOR_USER principal name");
-+ } else {
-+ *modified_send_buf = *send_buf;
-+ }
-
- return true;
- }
-@@ -617,6 +686,7 @@ static bool torture_krb5_post_recv_tgs_req_canon_test(struct torture_krb5_contex
- {
- KRB_ERROR error;
- size_t used;
-+ krb5_error_code expected_error;
-
- /*
- * If this account did not have a servicePrincipalName, then
-@@ -627,9 +697,13 @@ static bool torture_krb5_post_recv_tgs_req_canon_test(struct torture_krb5_contex
- torture_assert_int_equal(test_context->tctx,
- error.pvno, 5,
- "Got wrong error.pvno");
-+ expected_error = KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN - KRB5KDC_ERR_NONE;
-+ if (error.error_code != expected_error && test_context->test_data->mitm_s4u2self) {
-+ expected_error = KRB5KRB_AP_ERR_INAPP_CKSUM - KRB5KDC_ERR_NONE;
-+ }
- torture_assert_int_equal(test_context->tctx,
- error.error_code,
-- KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN - KRB5KDC_ERR_NONE,
-+ expected_error,
- "Got wrong error.error_code");
- } else {
- torture_assert_int_equal(test_context->tctx,
-@@ -672,6 +746,8 @@ static bool torture_krb5_post_recv_tgs_req_canon_test(struct torture_krb5_contex
- torture_assert_int_equal(test_context->tctx,
- *test_context->tgs_rep.ticket.enc_part.kvno & 0xFFFF0000,
- 0, "Unexpecedly got a RODC number in the KVNO, should just be principal KVNO");
-+ torture_assert(test_context->tctx, test_context->test_data->mitm_s4u2self == false,
-+ "KDC accepted PA_S4U2Self with unkeyed checksum!");
- free_TGS_REP(&test_context->tgs_rep);
- }
- torture_assert(test_context->tctx, test_context->packet_count == 0, "too many packets");
-@@ -1845,7 +1921,23 @@ static bool torture_krb5_as_req_canon(struct torture_context *tctx, const void *
- */
- if (torture_setting_bool(tctx, "expect_machine_account", false)
- && (test_data->enterprise || test_data->upn == false)) {
-+
-+ if (test_data->mitm_s4u2self) {
-+ torture_assert_int_equal(tctx, k5ret, KRB5KRB_AP_ERR_INAPP_CKSUM,
-+ assertion_message);
-+ /* Done testing mitm-s4u2self */
-+ return true;
-+ }
-+
- torture_assert_int_equal(tctx, k5ret, 0, assertion_message);
-+
-+ /* Check that the impersonate principal is not being canonicalized by the KDC. */
-+ if (test_data->s4u2self) {
-+ torture_assert(tctx, krb5_principal_compare(k5_context, server_creds->client,
-+ principal),
-+ "TGS-REP cname does not match requested client principal");
-+ }
-+
- torture_assert_int_equal(tctx, krb5_cc_store_cred(k5_context,
- ccache, server_creds),
- 0, "krb5_cc_store_cred failed");
-@@ -2222,11 +2314,25 @@ struct torture_suite *torture_krb5_canon(TALLOC_CTX *mem_ctx)
- (i & TEST_NETBIOS_REALM) ? "netbios-realm" : "krb5-realm",
- (i & TEST_WIN2K) ? "win2k" : "no-win2k",
- (i & TEST_UPN) ? "upn" : "no-upn",
-- (i & TEST_S4U2SELF) ? "s4u2self" : "normal",
-+ (i & TEST_S4U2SELF) ? (i & TEST_MITM_S4U2SELF) ? "mitm-s4u2self" : "s4u2self" : "normal",
- (i & TEST_REMOVEDOLLAR) ? "removedollar" : "keepdollar");
-
- struct test_data *test_data = talloc_zero(suite, struct test_data);
-
-+ if (i & TEST_MITM_S4U2SELF) {
-+ if (!(i & TEST_S4U2SELF)) {
-+ continue;
-+ }
-+ }
-+
-+ /*
-+ * Due to backport: this flag is not used until Samba
-+ * 4.10
-+ */
-+ if (i & TEST_AS_REQ_SPN) {
-+ continue;
-+ }
-+
- test_data->test_name = name;
- test_data->real_realm
- = strupper_talloc(test_data,
-@@ -2246,6 +2352,7 @@ struct torture_suite *torture_krb5_canon(TALLOC_CTX *mem_ctx)
- test_data->win2k = (i & TEST_WIN2K) != 0;
- test_data->upn = (i & TEST_UPN) != 0;
- test_data->s4u2self = (i & TEST_S4U2SELF) != 0;
-+ test_data->mitm_s4u2self = (i & TEST_MITM_S4U2SELF) != 0;
- test_data->removedollar = (i & TEST_REMOVEDOLLAR) != 0;
- torture_suite_add_simple_tcase_const(suite, name, torture_krb5_as_req_canon,
- test_data);
---
-2.11.0
-
-
-From 38a3548643147f8cd080176e524db7f46fe96e56 Mon Sep 17 00:00:00 2001
-From: Isaac Boukris <iboukris@gmail.com>
-Date: Wed, 30 Jan 2019 23:49:07 +0200
-Subject: [PATCH 2/2] CVE-2018-16860 Heimdal KDC: Reject PA-S4U2Self with
- unkeyed checksum
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13685
-
-Signed-off-by: Isaac Boukris <iboukris@gmail.com>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
-Signed-off-by: Andrew Bartlett <abartlet@samba.org>
----
- selftest/knownfail.d/mitm-s4u2self | 576 -------------------------------------
- source4/heimdal/kdc/krb5tgs.c | 7 +
- 2 files changed, 7 insertions(+), 576 deletions(-)
- delete mode 100644 selftest/knownfail.d/mitm-s4u2self
-
-diff --git a/selftest/knownfail.d/mitm-s4u2self b/selftest/knownfail.d/mitm-s4u2self
-deleted file mode 100644
-index aacbd101867..00000000000
---- a/selftest/knownfail.d/mitm-s4u2self
-+++ /dev/null
-@@ -1,576 +0,0 @@
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account ALLOWED permission to replicate to an RODC.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(rodc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.upn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with account having identical UPN and SPN.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.spn.mitm-s4u2self\(promoted_dc\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(rodc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(promoted_dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2000dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.samaccountname.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.no-win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.krb5-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.lc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.lc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.no-enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.no-canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
--^samba4.krb5.kdc with machine account.canon.enterprise.uc-realm.uc-user.netbios-realm.win2k.removedollar.mitm-s4u2self\(fl2008r2dc:local\)
-diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c
-index a888788bb6f..ff7d93138c0 100644
---- a/source4/heimdal/kdc/krb5tgs.c
-+++ b/source4/heimdal/kdc/krb5tgs.c
-@@ -1925,6 +1925,13 @@ server_lookup:
- goto out;
- }
-
-+ if (!krb5_checksum_is_keyed(context, self.cksum.cksumtype)) {
-+ free_PA_S4U2Self(&self);
-+ kdc_log(context, config, 0, "Reject PA-S4U2Self with unkeyed checksum");
-+ ret = KRB5KRB_AP_ERR_INAPP_CKSUM;
-+ goto out;
-+ }
-+
- ret = _krb5_s4u2self_to_checksumdata(context, &self, &datack);
- if (ret)
- goto out;
---
-2.11.0
-
diff --git a/debian/patches/CVE-2019-12435-4.9-03.patch b/debian/patches/CVE-2019-12435-4.9-03.patch
deleted file mode 100644
index f5d7d8ee988..00000000000
--- a/debian/patches/CVE-2019-12435-4.9-03.patch
+++ /dev/null
@@ -1,157 +0,0 @@
-From 0d86acb75fe645a4306a3278334f28b320b1a6ab Mon Sep 17 00:00:00 2001
-From: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
-Date: Wed, 22 May 2019 12:58:01 +1200
-Subject: [PATCH 1/2] CVE-2019-12435 rpc/dns: avoid NULL deference if zone not
- found in DnssrvOperation
-
-We still want to return DOES_NOT_EXIST when request_filter is not 0.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13922
-
-Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
----
- python/samba/tests/dcerpc/dnsserver.py | 25 +++++++++++++++++++
- .../rpc_server/dnsserver/dcerpc_dnsserver.c | 7 +++++-
- 2 files changed, 31 insertions(+), 1 deletion(-)
-
-diff --git a/python/samba/tests/dcerpc/dnsserver.py b/python/samba/tests/dcerpc/dnsserver.py
-index 53e1abde042..db9ed156148 100644
---- a/python/samba/tests/dcerpc/dnsserver.py
-+++ b/python/samba/tests/dcerpc/dnsserver.py
-@@ -28,6 +28,7 @@ from samba.dcerpc import dnsp, dnsserver, security
- from samba.tests import RpcInterfaceTestCase, env_get_var_value
- from samba.netcmd.dns import ARecord, AAAARecord, PTRRecord, CNameRecord, NSRecord, MXRecord, SRVRecord, TXTRecord
- from samba import sd_utils, descriptor
-+from samba import WERRORError, werror
-
- class DnsserverTests(RpcInterfaceTestCase):
-
-@@ -707,6 +708,30 @@ class DnsserverTests(RpcInterfaceTestCase):
- 'ServerInfo')
- self.assertEquals(dnsserver.DNSSRV_TYPEID_SERVER_INFO, typeid)
-
-+
-+ # This test is to confirm that we do not support multizone operations,
-+ # which are designated by a non-zero dwContext value (the 3rd argument
-+ # to DnssrvOperation).
-+ def test_operation_invalid(self):
-+ non_zone = 'a-zone-that-does-not-exist'
-+ typeid = dnsserver.DNSSRV_TYPEID_NAME_AND_PARAM
-+ name_and_param = dnsserver.DNS_RPC_NAME_AND_PARAM()
-+ name_and_param.pszNodeName = 'AllowUpdate'
-+ name_and_param.dwParam = dnsp.DNS_ZONE_UPDATE_SECURE
-+ try:
-+ res = self.conn.DnssrvOperation(self.server,
-+ non_zone,
-+ 1,
-+ 'ResetDwordProperty',
-+ typeid,
-+ name_and_param)
-+ except WERRORError as e:
-+ if e.args[0] == werror.WERR_DNS_ERROR_ZONE_DOES_NOT_EXIST:
-+ return
-+
-+ # We should always encounter a DOES_NOT_EXIST error.
-+ self.fail()
-+
- def test_operation2(self):
- client_version = dnsserver.DNS_CLIENT_VERSION_LONGHORN
- rev_zone = '1.168.192.in-addr.arpa'
-diff --git a/source4/rpc_server/dnsserver/dcerpc_dnsserver.c b/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-index b42d7c549d1..4e28778c89a 100644
---- a/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-+++ b/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-@@ -1955,7 +1955,12 @@ static WERROR dcesrv_DnssrvOperation(struct dcesrv_call_state *dce_call, TALLOC_
- &r->in.pData);
- } else {
- z = dnsserver_find_zone(dsstate->zones, r->in.pszZone);
-- if (z == NULL && request_filter == 0) {
-+ /*
-+ * In the case that request_filter is not 0 and z is NULL,
-+ * the request is for a multizone operation, which we do not
-+ * yet support, so just error on NULL zone name.
-+ */
-+ if (z == NULL) {
- return WERR_DNS_ERROR_ZONE_DOES_NOT_EXIST;
- }
-
---
-2.17.1
-
-
-From f05cc18c08a63850d956a0b8b325d88c5be3bef9 Mon Sep 17 00:00:00 2001
-From: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
-Date: Wed, 22 May 2019 13:23:25 +1200
-Subject: [PATCH 2/2] CVE-2019-12435 rpc/dns: avoid NULL deference if zone not
- found in DnssrvOperation2
-
-We still want to return DOES_NOT_EXIST when request_filter is not 0.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13922
-
-Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
----
- python/samba/tests/dcerpc/dnsserver.py | 26 +++++++++++++++++++
- .../rpc_server/dnsserver/dcerpc_dnsserver.c | 7 ++++-
- 2 files changed, 32 insertions(+), 1 deletion(-)
-
-diff --git a/python/samba/tests/dcerpc/dnsserver.py b/python/samba/tests/dcerpc/dnsserver.py
-index db9ed156148..7264a290ef2 100644
---- a/python/samba/tests/dcerpc/dnsserver.py
-+++ b/python/samba/tests/dcerpc/dnsserver.py
-@@ -732,6 +732,32 @@ class DnsserverTests(RpcInterfaceTestCase):
- # We should always encounter a DOES_NOT_EXIST error.
- self.fail()
-
-+ # This test is to confirm that we do not support multizone operations,
-+ # which are designated by a non-zero dwContext value (the 5th argument
-+ # to DnssrvOperation2).
-+ def test_operation2_invalid(self):
-+ client_version = dnsserver.DNS_CLIENT_VERSION_LONGHORN
-+ non_zone = 'a-zone-that-does-not-exist'
-+ typeid = dnsserver.DNSSRV_TYPEID_NAME_AND_PARAM
-+ name_and_param = dnsserver.DNS_RPC_NAME_AND_PARAM()
-+ name_and_param.pszNodeName = 'AllowUpdate'
-+ name_and_param.dwParam = dnsp.DNS_ZONE_UPDATE_SECURE
-+ try:
-+ res = self.conn.DnssrvOperation2(client_version,
-+ 0,
-+ self.server,
-+ non_zone,
-+ 1,
-+ 'ResetDwordProperty',
-+ typeid,
-+ name_and_param)
-+ except WERRORError as e:
-+ if e.args[0] == werror.WERR_DNS_ERROR_ZONE_DOES_NOT_EXIST:
-+ return
-+
-+ # We should always encounter a DOES_NOT_EXIST error.
-+ self.fail()
-+
- def test_operation2(self):
- client_version = dnsserver.DNS_CLIENT_VERSION_LONGHORN
- rev_zone = '1.168.192.in-addr.arpa'
-diff --git a/source4/rpc_server/dnsserver/dcerpc_dnsserver.c b/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-index 4e28778c89a..353754f9261 100644
---- a/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-+++ b/source4/rpc_server/dnsserver/dcerpc_dnsserver.c
-@@ -2167,7 +2167,12 @@ static WERROR dcesrv_DnssrvOperation2(struct dcesrv_call_state *dce_call, TALLOC
- &r->in.pData);
- } else {
- z = dnsserver_find_zone(dsstate->zones, r->in.pszZone);
-- if (z == NULL && request_filter == 0) {
-+ /*
-+ * In the case that request_filter is not 0 and z is NULL,
-+ * the request is for a multizone operation, which we do not
-+ * yet support, so just error on NULL zone name.
-+ */
-+ if (z == NULL) {
- return WERR_DNS_ERROR_ZONE_DOES_NOT_EXIST;
- }
-
---
-2.17.1
-
diff --git a/debian/patches/CVE-2019-3870-v4-9-04.patch b/debian/patches/CVE-2019-3870-v4-9-04.patch
deleted file mode 100644
index 3de49770201..00000000000
--- a/debian/patches/CVE-2019-3870-v4-9-04.patch
+++ /dev/null
@@ -1,567 +0,0 @@
-From c25348e1f2a7fd0801e06918d67c469f1912f311 Mon Sep 17 00:00:00 2001
-From: Tim Beale <timbeale@catalyst.net.nz>
-Date: Fri, 15 Mar 2019 15:20:21 +1300
-Subject: [PATCH 1/5] CVE-2019-3870 tests: Extend smbd tests to check for umask
- being overwritten
-
-The smbd changes the umask - if the code fails to restore the umask to
-what it was, then this is very bad. Add an extra check to every
-smbd-related test that the umask at the end of the test is the same as
-what it was at the beginning (i.e. if the smbd code changed the umask
-then it correctly restored the value afterwards).
-
-As the selftest sets the umask for all tests to zero, it makes it hard
-to detect this problem, so the test setUp() needs to set it to something
-else first.
-
-This extra checking is added to the setUp()/tearDown() so that it
-applies to all test-cases. However, any failure that occur with this
-approach will not be able to be known-failed.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13834
-
-Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
-
-(This backport to Samba 4.9 by Andrew Bartlett was not a pure
-cherry-pick due to merge conflicts)
----
- python/samba/tests/ntacls_backup.py | 4 ++--
- python/samba/tests/posixacl.py | 4 ++--
- python/samba/tests/smbd_base.py | 48 +++++++++++++++++++++++++++++++++++++
- selftest/knownfail.d/umask-leak | 3 +++
- 4 files changed, 55 insertions(+), 4 deletions(-)
- create mode 100644 python/samba/tests/smbd_base.py
- create mode 100644 selftest/knownfail.d/umask-leak
-
-diff --git a/python/samba/tests/ntacls_backup.py b/python/samba/tests/ntacls_backup.py
-index 9ab264a27fd..763804fd63f 100644
---- a/python/samba/tests/ntacls_backup.py
-+++ b/python/samba/tests/ntacls_backup.py
-@@ -27,10 +27,10 @@ from samba import ntacls
- from samba.auth import system_session
- from samba.param import LoadParm
- from samba.dcerpc import security
--from samba.tests import TestCaseInTempDir
-+from samba.tests.smbd_base import SmbdBaseTests
-
-
--class NtaclsBackupRestoreTests(TestCaseInTempDir):
-+class NtaclsBackupRestoreTests(SmbdBaseTests):
- """
- Tests for NTACLs backup and restore.
- """
-diff --git a/python/samba/tests/posixacl.py b/python/samba/tests/posixacl.py
-index 8b48825fc6f..2005f4eef59 100644
---- a/python/samba/tests/posixacl.py
-+++ b/python/samba/tests/posixacl.py
-@@ -20,7 +20,7 @@
-
- from samba.ntacls import setntacl, getntacl, checkset_backend
- from samba.dcerpc import security, smb_acl, idmap
--from samba.tests import TestCaseInTempDir
-+from samba.tests.smbd_base import SmbdBaseTests
- from samba import provision
- import os
- from samba.samba3 import smbd, passdb
-@@ -32,7 +32,7 @@ DOM_SID = "S-1-5-21-2212615479-2695158682-2101375467"
- ACL = "O:S-1-5-21-2212615479-2695158682-2101375467-512G:S-1-5-21-2212615479-2695158682-2101375467-513D:(A;OICI;0x001f01ff;;;S-1-5-21-2212615479-2695158682-2101375467-512)"
-
-
--class PosixAclMappingTests(TestCaseInTempDir):
-+class PosixAclMappingTests(SmbdBaseTests):
-
- def setUp(self):
- super(PosixAclMappingTests, self).setUp()
-diff --git a/python/samba/tests/smbd_base.py b/python/samba/tests/smbd_base.py
-new file mode 100644
-index 00000000000..4e5c3641e2c
---- /dev/null
-+++ b/python/samba/tests/smbd_base.py
-@@ -0,0 +1,48 @@
-+# Unix SMB/CIFS implementation. Common code for smbd python bindings tests
-+# Copyright (C) Catalyst.Net Ltd 2019
-+#
-+# This program is free software; you can redistribute it and/or modify
-+# it under the terms of the GNU General Public License as published by
-+# the Free Software Foundation; either version 3 of the License, or
-+# (at your option) any later version.
-+#
-+# This program is distributed in the hope that it will be useful,
-+# but WITHOUT ANY WARRANTY; without even the implied warranty of
-+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-+# GNU General Public License for more details.
-+#
-+# You should have received a copy of the GNU General Public License
-+# along with this program. If not, see <http://www.gnu.org/licenses/>.
-+#
-+from samba.tests import TestCaseInTempDir
-+import os
-+
-+TEST_UMASK = 0o022
-+
-+class SmbdBaseTests(TestCaseInTempDir):
-+
-+ def get_umask(self):
-+ # we can only get the umask by setting it to something
-+ curr_umask = os.umask(0)
-+ # restore the old setting
-+ os.umask(curr_umask)
-+ return curr_umask
-+
-+ def setUp(self):
-+ super(SmbdBaseTests, self).setUp()
-+ self.orig_umask = self.get_umask()
-+
-+ # set an arbitrary umask - the underlying smbd code should override
-+ # this, but it allows us to check if umask is left unset
-+ os.umask(TEST_UMASK)
-+
-+ def tearDown(self):
-+ # the current umask should be what we set it to earlier - if it's not,
-+ # it indicates the code has changed it and not restored it
-+ self.assertEqual(self.get_umask(), TEST_UMASK,
-+ "umask unexpectedly overridden by test")
-+
-+ # restore the original umask value (before we interferred with it)
-+ os.umask(self.orig_umask)
-+
-+ super(SmbdBaseTests, self).tearDown()
-diff --git a/selftest/knownfail.d/umask-leak b/selftest/knownfail.d/umask-leak
-new file mode 100644
-index 00000000000..5580beb4b68
---- /dev/null
-+++ b/selftest/knownfail.d/umask-leak
-@@ -0,0 +1,3 @@
-+^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_smbd_create_file
-+^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_backup_online
-+^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_backup_offline
---
-2.11.0
-
-
-From b9ccfe0452524d8fdd5751944662856425599af2 Mon Sep 17 00:00:00 2001
-From: Tim Beale <timbeale@catalyst.net.nz>
-Date: Fri, 15 Mar 2019 13:52:50 +1300
-Subject: [PATCH 2/5] CVE-2019-3870 tests: Add test to check file-permissions
- are correct after provision
-
-This provisions a new DC and checks there are no world-writable
-files in the new DC's private directory.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13834
-
-Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
-Reviewed-by: Jeremy Allison <jra@samba.org>
----
- selftest/knownfail.d/provision_fileperms | 1 +
- source4/selftest/tests.py | 1 +
- source4/setup/tests/provision_fileperms.sh | 71 ++++++++++++++++++++++++++++++
- 3 files changed, 73 insertions(+)
- create mode 100644 selftest/knownfail.d/provision_fileperms
- create mode 100755 source4/setup/tests/provision_fileperms.sh
-
-diff --git a/selftest/knownfail.d/provision_fileperms b/selftest/knownfail.d/provision_fileperms
-new file mode 100644
-index 00000000000..88b1585fd19
---- /dev/null
-+++ b/selftest/knownfail.d/provision_fileperms
-@@ -0,0 +1 @@
-+samba4.blackbox.provision_fileperms.provision-fileperms\(none\)
-diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
-index 18b2c1162b0..d6fb388dc33 100755
---- a/source4/selftest/tests.py
-+++ b/source4/selftest/tests.py
-@@ -904,6 +904,7 @@ plantestsuite_loadlist("samba4.deletetest.python(ad_dc_ntvfs)", "ad_dc_ntvfs", [
- plantestsuite("samba4.blackbox.samba3dump", "none", [os.path.join(samba4srcdir, "selftest/test_samba3dump.sh")])
- plantestsuite("samba4.blackbox.upgrade", "none", ["PYTHON=%s" % python, os.path.join(samba4srcdir, "setup/tests/blackbox_s3upgrade.sh"), '$PREFIX/provision'])
- plantestsuite("samba4.blackbox.provision.py", "none", ["PYTHON=%s" % python, os.path.join(samba4srcdir, "setup/tests/blackbox_provision.sh"), '$PREFIX/provision'])
-+plantestsuite("samba4.blackbox.provision_fileperms", "none", ["PYTHON=%s" % python, os.path.join(samba4srcdir, "setup/tests/provision_fileperms.sh"), '$PREFIX/provision'])
- plantestsuite("samba4.blackbox.supported_features", "none",
- ["PYTHON=%s" % python,
- os.path.join(samba4srcdir,
-diff --git a/source4/setup/tests/provision_fileperms.sh b/source4/setup/tests/provision_fileperms.sh
-new file mode 100755
-index 00000000000..0b3ef0321fb
---- /dev/null
-+++ b/source4/setup/tests/provision_fileperms.sh
-@@ -0,0 +1,71 @@
-+#!/bin/sh
-+
-+if [ $# -lt 1 ]; then
-+cat <<EOF
-+Usage: $0 PREFIX
-+EOF
-+exit 1;
-+fi
-+
-+PREFIX="$1"
-+shift 1
-+
-+. `dirname $0`/../../../testprogs/blackbox/subunit.sh
-+
-+# selftest sets the umask to zero. Explicitly set it to 022 here,
-+# which should mean files should never be writable for anyone else
-+ORIG_UMASK=`umask`
-+umask 0022
-+
-+# checks that the files in the 'private' directory created are not
-+# world-writable
-+check_private_file_perms()
-+{
-+ target_dir="$1/private"
-+ result=0
-+
-+ for file in `ls $target_dir/`
-+ do
-+ filepath="$target_dir/$file"
-+
-+ # skip directories/sockets for now
-+ if [ ! -f $filepath ] ; then
-+ continue;
-+ fi
-+
-+ # use stat to get the file permissions, i.e. -rw-------
-+ file_perm=`stat -c "%A" $filepath`
-+
-+ # then use cut to drop the first 4 chars containing the file type
-+ # and owner permissions. What's left is the group and other users
-+ global_perm=`echo $file_perm | cut -c4-`
-+
-+ # check the remainder doesn't have write permissions set
-+ if [ -z "${global_perm##*w*}" ] ; then
-+ echo "Error: $file has $file_perm permissions"
-+ result=1
-+ fi
-+ done
-+ return $result
-+}
-+
-+TARGET_DIR=$PREFIX/basic-dc
-+rm -rf $TARGET_DIR
-+
-+# create a dummy smb.conf - we need to use fake ACLs for the file system here
-+# (but passing --option args with spaces in it proved too difficult in bash)
-+SMB_CONF=$TARGET_DIR/tmp/smb.conf
-+mkdir -p `dirname $SMB_CONF`
-+echo "vfs objects = fake_acls xattr_tdb" > $SMB_CONF
-+
-+# provision a basic DC
-+testit "basic-provision" $PYTHON $BINDIR/samba-tool domain provision --server-role="dc" --domain=FOO --realm=foo.example.com --targetdir=$TARGET_DIR --configfile=$SMB_CONF
-+
-+# check the file permissions in the 'private' directory really are private
-+testit "provision-fileperms" check_private_file_perms $TARGET_DIR
-+
-+rm -rf $TARGET_DIR
-+
-+umask $ORIG_UMASK
-+
-+exit $failed
---
-2.11.0
-
-
-From be504b486d78133fd28ad3d7adfe589a99338846 Mon Sep 17 00:00:00 2001
-From: Andrew Bartlett <abartlet@samba.org>
-Date: Thu, 21 Mar 2019 17:21:58 +1300
-Subject: [PATCH 3/5] CVE-2019-3870 pysmbd: Include tests to show the outside
- umask has no impact
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13834
-
-Signed-off-by: Andrew Bartlett <abartlet@samba.org>
-Reviewed-by: Jeremy Allison <jra@samba.org>
----
- python/samba/tests/ntacls_backup.py | 13 +++++++++++++
- python/samba/tests/smbd_base.py | 2 +-
- selftest/knownfail.d/pymkdir-umask | 1 +
- 3 files changed, 15 insertions(+), 1 deletion(-)
- create mode 100644 selftest/knownfail.d/pymkdir-umask
-
-diff --git a/python/samba/tests/ntacls_backup.py b/python/samba/tests/ntacls_backup.py
-index 763804fd63f..b7defd35903 100644
---- a/python/samba/tests/ntacls_backup.py
-+++ b/python/samba/tests/ntacls_backup.py
-@@ -112,6 +112,12 @@ class NtaclsBackupRestoreTests(SmbdBaseTests):
-
- dirpath = os.path.join(self.service_root, 'a-dir')
- smbd.mkdir(dirpath, self.service)
-+ mode = os.stat(dirpath).st_mode
-+
-+ # This works in conjunction with the TEST_UMASK in smbd_base
-+ # to ensure that permissions are not related to the umask
-+ # but instead the smb.conf settings
-+ self.assertEquals(mode & 0o777, 0o755)
- self.assertTrue(os.path.isdir(dirpath))
-
- def test_smbd_create_file(self):
-@@ -123,6 +129,13 @@ class NtaclsBackupRestoreTests(SmbdBaseTests):
- smbd.create_file(filepath, self.service)
- self.assertTrue(os.path.isfile(filepath))
-
-+ mode = os.stat(filepath).st_mode
-+
-+ # This works in conjunction with the TEST_UMASK in smbd_base
-+ # to ensure that permissions are not related to the umask
-+ # but instead the smb.conf settings
-+ self.assertEquals(mode & 0o777, 0o644)
-+
- # As well as checking that unlink works, this removes the
- # fake xattrs from the dev/inode based DB
- smbd.unlink(filepath, self.service)
-diff --git a/python/samba/tests/smbd_base.py b/python/samba/tests/smbd_base.py
-index 4e5c3641e2c..b49bcc0828f 100644
---- a/python/samba/tests/smbd_base.py
-+++ b/python/samba/tests/smbd_base.py
-@@ -17,7 +17,7 @@
- from samba.tests import TestCaseInTempDir
- import os
-
--TEST_UMASK = 0o022
-+TEST_UMASK = 0o042
-
- class SmbdBaseTests(TestCaseInTempDir):
-
-diff --git a/selftest/knownfail.d/pymkdir-umask b/selftest/knownfail.d/pymkdir-umask
-new file mode 100644
-index 00000000000..5af01be44e3
---- /dev/null
-+++ b/selftest/knownfail.d/pymkdir-umask
-@@ -0,0 +1 @@
-+^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_smbd_mkdir
-\ No newline at end of file
---
-2.11.0
-
-
-From c99f2ab22cc93b5194a3477c6a241600fa0f6758 Mon Sep 17 00:00:00 2001
-From: Andrew Bartlett <abartlet@samba.org>
-Date: Thu, 14 Mar 2019 18:20:06 +1300
-Subject: [PATCH 4/5] CVE-2019-3870 pysmbd: Move umask manipuations as close as
- possible to users
-
-Umask manipulation was added to pysmbd with e146fe5ef96c1522175a8e81db15d1e8879e5652 in 2012
-and init_files_struct was split out in 747c3f1fb379bb68cc7479501b85741493c05812 in 2018 for
-Samba 4.9. (It was added to assist the smbd.create_file() routine used in the backup and
-restore tools, which needed to write files with full metadata).
-
-This in turn avoids leaving init_files_struct() without resetting the umask to
-the original, saved, value.
-
-Per umask(2) this is required before open() and mkdir() system calls (along
-side other file-like things such as those for Unix domain socks and FIFOs etc).
-
-Therefore for safety and clarify the additional 'belt and braces' umask
-manipuations elsewhere are removed.
-
-mkdir() will be protected by a umask() bracket, for correctness, in the next patch.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13834
-
-Signed-off-by: Andrew Bartlett <abartlet@samba.org>
-
-(This backport to Samba 4.9 by Andrew Bartlett is not a pure
-cherry-pick due to merge conflicts)
----
- selftest/knownfail.d/provision_fileperms | 1 -
- selftest/knownfail.d/umask-leak | 3 ---
- source3/smbd/pysmbd.c | 34 ++++++++++----------------------
- 3 files changed, 10 insertions(+), 28 deletions(-)
- delete mode 100644 selftest/knownfail.d/provision_fileperms
- delete mode 100644 selftest/knownfail.d/umask-leak
-
-diff --git a/selftest/knownfail.d/provision_fileperms b/selftest/knownfail.d/provision_fileperms
-deleted file mode 100644
-index 88b1585fd19..00000000000
---- a/selftest/knownfail.d/provision_fileperms
-+++ /dev/null
-@@ -1 +0,0 @@
--samba4.blackbox.provision_fileperms.provision-fileperms\(none\)
-diff --git a/selftest/knownfail.d/umask-leak b/selftest/knownfail.d/umask-leak
-deleted file mode 100644
-index 5580beb4b68..00000000000
---- a/selftest/knownfail.d/umask-leak
-+++ /dev/null
-@@ -1,3 +0,0 @@
--^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_smbd_create_file
--^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_backup_online
--^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_backup_offline
-diff --git a/source3/smbd/pysmbd.c b/source3/smbd/pysmbd.c
-index 1431925efd0..179a1ee2943 100644
---- a/source3/smbd/pysmbd.c
-+++ b/source3/smbd/pysmbd.c
-@@ -85,27 +85,19 @@ static int set_sys_acl_conn(const char *fname,
- {
- int ret;
- struct smb_filename *smb_fname = NULL;
-- mode_t saved_umask;
-
- TALLOC_CTX *frame = talloc_stackframe();
-
-- /* we want total control over the permissions on created files,
-- so set our umask to 0 */
-- saved_umask = umask(0);
--
- smb_fname = synthetic_smb_fname_split(frame,
- fname,
- lp_posix_pathnames());
- if (smb_fname == NULL) {
- TALLOC_FREE(frame);
-- umask(saved_umask);
- return -1;
- }
-
- ret = SMB_VFS_SYS_ACL_SET_FILE( conn, smb_fname, acltype, theacl);
-
-- umask(saved_umask);
--
- TALLOC_FREE(frame);
- return ret;
- }
-@@ -132,22 +124,26 @@ static NTSTATUS init_files_struct(TALLOC_CTX *mem_ctx,
- }
- fsp->conn = conn;
-
-- /* we want total control over the permissions on created files,
-- so set our umask to 0 */
-- saved_umask = umask(0);
--
- smb_fname = synthetic_smb_fname_split(fsp,
- fname,
- lp_posix_pathnames());
- if (smb_fname == NULL) {
-- umask(saved_umask);
- return NT_STATUS_NO_MEMORY;
- }
-
- fsp->fsp_name = smb_fname;
-+
-+ /*
-+ * we want total control over the permissions on created files,
-+ * so set our umask to 0 (this matters if flags contains O_CREAT)
-+ */
-+ saved_umask = umask(0);
-+
- fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, flags, 00644);
-+
-+ umask(saved_umask);
-+
- if (fsp->fh->fd == -1) {
-- umask(saved_umask);
- return NT_STATUS_INVALID_PARAMETER;
- }
-
-@@ -157,7 +153,6 @@ static NTSTATUS init_files_struct(TALLOC_CTX *mem_ctx,
- DEBUG(0,("Error doing fstat on open file %s (%s)\n",
- smb_fname_str_dbg(smb_fname),
- strerror(errno) ));
-- umask(saved_umask);
- return map_nt_error_from_unix(errno);
- }
-
-@@ -444,7 +439,6 @@ static PyObject *py_smbd_chown(PyObject *self, PyObject *args, PyObject *kwargs)
- char *fname, *service = NULL;
- int uid, gid;
- TALLOC_CTX *frame;
-- mode_t saved_umask;
- struct smb_filename *smb_fname = NULL;
-
- if (!PyArg_ParseTupleAndKeywords(args, kwargs, "sii|z",
-@@ -460,10 +454,6 @@ static PyObject *py_smbd_chown(PyObject *self, PyObject *args, PyObject *kwargs)
- return NULL;
- }
-
-- /* we want total control over the permissions on created files,
-- so set our umask to 0 */
-- saved_umask = umask(0);
--
- smb_fname = synthetic_smb_fname(talloc_tos(),
- fname,
- NULL,
-@@ -471,7 +461,6 @@ static PyObject *py_smbd_chown(PyObject *self, PyObject *args, PyObject *kwargs)
- lp_posix_pathnames() ?
- SMB_FILENAME_POSIX_PATH : 0);
- if (smb_fname == NULL) {
-- umask(saved_umask);
- TALLOC_FREE(frame);
- errno = ENOMEM;
- return PyErr_SetFromErrno(PyExc_OSError);
-@@ -479,14 +468,11 @@ static PyObject *py_smbd_chown(PyObject *self, PyObject *args, PyObject *kwargs)
-
- ret = SMB_VFS_CHOWN(conn, smb_fname, uid, gid);
- if (ret != 0) {
-- umask(saved_umask);
- TALLOC_FREE(frame);
- errno = ret;
- return PyErr_SetFromErrno(PyExc_OSError);
- }
-
-- umask(saved_umask);
--
- TALLOC_FREE(frame);
-
- Py_RETURN_NONE;
---
-2.11.0
-
-
-From 61414430c6bd6c9c9bfa1512880ecc6adbdbf9b4 Mon Sep 17 00:00:00 2001
-From: Andrew Bartlett <abartlet@samba.org>
-Date: Thu, 21 Mar 2019 17:24:14 +1300
-Subject: [PATCH 5/5] CVE-2019-3870 pysmbd: Ensure a zero umask is set for
- smbd.mkdir()
-
-mkdir() is the other call that requires a umask of 0 in Samba.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13834
-
-Signed-off-by: Andrew Bartlett <abartlet@samba.org>
-Reviewed-by: Jeremy Allison <jra@samba.org>
----
- selftest/knownfail.d/pymkdir-umask | 1 -
- source3/smbd/pysmbd.c | 11 ++++++++++-
- 2 files changed, 10 insertions(+), 2 deletions(-)
- delete mode 100644 selftest/knownfail.d/pymkdir-umask
-
-diff --git a/selftest/knownfail.d/pymkdir-umask b/selftest/knownfail.d/pymkdir-umask
-deleted file mode 100644
-index 5af01be44e3..00000000000
---- a/selftest/knownfail.d/pymkdir-umask
-+++ /dev/null
-@@ -1 +0,0 @@
--^samba.tests.ntacls_backup.samba.tests.ntacls_backup.NtaclsBackupRestoreTests.test_smbd_mkdir
-\ No newline at end of file
-diff --git a/source3/smbd/pysmbd.c b/source3/smbd/pysmbd.c
-index 179a1ee2943..845ea25f936 100644
---- a/source3/smbd/pysmbd.c
-+++ b/source3/smbd/pysmbd.c
-@@ -739,6 +739,8 @@ static PyObject *py_smbd_mkdir(PyObject *self, PyObject *args, PyObject *kwargs)
- TALLOC_CTX *frame = talloc_stackframe();
- struct connection_struct *conn = NULL;
- struct smb_filename *smb_fname = NULL;
-+ int ret;
-+ mode_t saved_umask;
-
- if (!PyArg_ParseTupleAndKeywords(args,
- kwargs,
-@@ -769,8 +771,15 @@ static PyObject *py_smbd_mkdir(PyObject *self, PyObject *args, PyObject *kwargs)
- return NULL;
- }
-
-+ /* we want total control over the permissions on created files,
-+ so set our umask to 0 */
-+ saved_umask = umask(0);
-+
-+ ret = SMB_VFS_MKDIR(conn, smb_fname, 00755);
-
-- if (SMB_VFS_MKDIR(conn, smb_fname, 00755) == -1) {
-+ umask(saved_umask);
-+
-+ if (ret == -1) {
- DBG_ERR("mkdir error=%d (%s)\n", errno, strerror(errno));
- TALLOC_FREE(frame);
- return NULL;
---
-2.11.0
-
diff --git a/debian/patches/CVE-2019-3880-v4-9-02.patch b/debian/patches/CVE-2019-3880-v4-9-02.patch
deleted file mode 100644
index eded5d9ddb3..00000000000
--- a/debian/patches/CVE-2019-3880-v4-9-02.patch
+++ /dev/null
@@ -1,151 +0,0 @@
-From a803d2524b8c06e2c360db0c686a212ac49f7321 Mon Sep 17 00:00:00 2001
-From: Jeremy Allison <jra@samba.org>
-Date: Thu, 21 Mar 2019 14:51:30 -0700
-Subject: [PATCH] CVE-2019-3880 s3: rpc: winreg: Remove implementations of
- SaveKey/RestoreKey.
-
-The were not using VFS backend calls and could only work
-locally, and were unsafe against symlink races and other
-security issues.
-
-If the incoming handle is valid, return WERR_BAD_PATHNAME.
-
-[MS-RRP] states "The format of the file name is implementation-specific"
-so ensure we don't allow this.
-
-As reported by Michael Hanselmann.
-
-BUG: https://bugzilla.samba.org/show_bug.cgi?id=13851
-
-Signed-off-by: Jeremy Allison <jra@samba.org>
-Reviewed-by: Andrew Bartlett <abartlet@samba.org>
----
- source3/rpc_server/winreg/srv_winreg_nt.c | 92 ++-----------------------------
- 1 file changed, 4 insertions(+), 88 deletions(-)
-
-diff --git a/source3/rpc_server/winreg/srv_winreg_nt.c b/source3/rpc_server/winreg/srv_winreg_nt.c
-index d9ee8d0602d..816c6bb2a12 100644
---- a/source3/rpc_server/winreg/srv_winreg_nt.c
-+++ b/source3/rpc_server/winreg/srv_winreg_nt.c
-@@ -640,46 +640,6 @@ WERROR _winreg_AbortSystemShutdown(struct pipes_struct *p,
- }
-
- /*******************************************************************
-- ********************************************************************/
--
--static int validate_reg_filename(TALLOC_CTX *ctx, char **pp_fname )
--{
-- char *p = NULL;
-- int num_services = lp_numservices();
-- int snum = -1;
-- const char *share_path = NULL;
-- char *fname = *pp_fname;
--
-- /* convert to a unix path, stripping the C:\ along the way */
--
-- if (!(p = valid_share_pathname(ctx, fname))) {
-- return -1;
-- }
--
-- /* has to exist within a valid file share */
--
-- for (snum=0; snum<num_services; snum++) {
-- if (!lp_snum_ok(snum) || lp_printable(snum)) {
-- continue;
-- }
--
-- share_path = lp_path(talloc_tos(), snum);
--
-- /* make sure we have a path (e.g. [homes] ) */
-- if (strlen(share_path) == 0) {
-- continue;
-- }
--
-- if (strncmp(share_path, p, strlen(share_path)) == 0) {
-- break;
-- }
-- }
--
-- *pp_fname = p;
-- return (snum < num_services) ? snum : -1;
--}
--
--/*******************************************************************
- _winreg_RestoreKey
- ********************************************************************/
-
-@@ -687,36 +647,11 @@ WERROR _winreg_RestoreKey(struct pipes_struct *p,
- struct winreg_RestoreKey *r)
- {
- struct registry_key *regkey = find_regkey_by_hnd( p, r->in.handle );
-- char *fname = NULL;
-- int snum = -1;
-
-- if ( !regkey )
-+ if ( !regkey ) {
- return WERR_INVALID_HANDLE;
--
-- if ( !r->in.filename || !r->in.filename->name )
-- return WERR_INVALID_PARAMETER;
--
-- fname = talloc_strdup(p->mem_ctx, r->in.filename->name);
-- if (!fname) {
-- return WERR_NOT_ENOUGH_MEMORY;
- }
--
-- DEBUG(8,("_winreg_RestoreKey: verifying restore of key [%s] from "
-- "\"%s\"\n", regkey->key->name, fname));
--
-- if ((snum = validate_reg_filename(p->mem_ctx, &fname)) == -1)
-- return WERR_BAD_PATHNAME;
--
-- /* user must posses SeRestorePrivilege for this this proceed */
--
-- if ( !security_token_has_privilege(p->session_info->security_token, SEC_PRIV_RESTORE)) {
-- return WERR_ACCESS_DENIED;
-- }
--
-- DEBUG(2,("_winreg_RestoreKey: Restoring [%s] from %s in share %s\n",
-- regkey->key->name, fname, lp_servicename(talloc_tos(), snum) ));
--
-- return reg_restorekey(regkey, fname);
-+ return WERR_BAD_PATHNAME;
- }
-
- /*******************************************************************
-@@ -727,30 +662,11 @@ WERROR _winreg_SaveKey(struct pipes_struct *p,
- struct winreg_SaveKey *r)
- {
- struct registry_key *regkey = find_regkey_by_hnd( p, r->in.handle );
-- char *fname = NULL;
-- int snum = -1;
-
-- if ( !regkey )
-+ if ( !regkey ) {
- return WERR_INVALID_HANDLE;
--
-- if ( !r->in.filename || !r->in.filename->name )
-- return WERR_INVALID_PARAMETER;
--
-- fname = talloc_strdup(p->mem_ctx, r->in.filename->name);
-- if (!fname) {
-- return WERR_NOT_ENOUGH_MEMORY;
- }
--
-- DEBUG(8,("_winreg_SaveKey: verifying backup of key [%s] to \"%s\"\n",
-- regkey->key->name, fname));
--
-- if ((snum = validate_reg_filename(p->mem_ctx, &fname)) == -1 )
-- return WERR_BAD_PATHNAME;
--
-- DEBUG(2,("_winreg_SaveKey: Saving [%s] to %s in share %s\n",
-- regkey->key->name, fname, lp_servicename(talloc_tos(), snum) ));
--
-- return reg_savekey(regkey, fname);
-+ return WERR_BAD_PATHNAME;
- }
-
- /*******************************************************************
---
-2.11.0
-
diff --git a/debian/patches/ctdb-config-depend-on-etc-ctdb-nodes-file.patch b/debian/patches/ctdb-config-depend-on-etc-ctdb-nodes-file.patch
new file mode 100644
index 00000000000..0b55e186ca8
--- /dev/null
+++ b/debian/patches/ctdb-config-depend-on-etc-ctdb-nodes-file.patch
@@ -0,0 +1,38 @@
+From d493f99928004fd2415ccca6702f8aa990addcf7 Mon Sep 17 00:00:00 2001
+From: Rafael David Tinoco <rafaeldtinoco@ubuntu.com>
+Date: Thu, 27 Jun 2019 20:12:25 +0000
+Subject: [PATCH] ctdb-config: depend on /etc/ctdb/nodes file
+
+BUG: https://bugzilla.samba.org/show_bug.cgi?id=14017
+
+CTDB should start as a disabled unit (systemd) in most of the
+distributions and, when trying to enable it for the first time, user
+should get an unconfigured, or similar, error.
+
+Depending on /etc/ctdb/nodes file will give a clear direction to final
+user on what is needed in order to get cluster up and running. It should
+work like previous ENABLED=NO variables in SySV like initialization
+scripts.
+
+Signed-off-by: Rafael David Tinoco <rafaeldtinoco@ubuntu.com>
+Reviewed-by: Martin Schwenke <martin@meltin.net>
+Reviewed-by: Amitay Isaacs <amitay@gmail.com>
+---
+ ctdb/config/ctdb.service | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/ctdb/config/ctdb.service b/ctdb/config/ctdb.service
+index 675b3147417..fd81c38e26d 100644
+--- a/ctdb/config/ctdb.service
++++ b/ctdb/config/ctdb.service
+@@ -2,6 +2,7 @@
+ Description=CTDB
+ Documentation=man:ctdbd(1) man:ctdb(7)
+ After=network-online.target time-sync.target
++ConditionFileNotEmpty=/etc/ctdb/nodes
+
+ [Service]
+ Type=forking
+--
+2.20.1
+
diff --git a/debian/patches/fix-nfs-service-name-to-nfs-kernel-server.patch b/debian/patches/fix-nfs-service-name-to-nfs-kernel-server.patch
new file mode 100644
index 00000000000..9e968cfdca4
--- /dev/null
+++ b/debian/patches/fix-nfs-service-name-to-nfs-kernel-server.patch
@@ -0,0 +1,80 @@
+From: Rafael David Tinoco <rafaeldtinoco@gmail.com>
+Subject: fix nfs service name to nfs-kernel-server
+
+Upstream code used to comment in/out service script names related to a specific
+distribution. Recently, they've changed this to a method of detecting on which
+distribution ctdb is running, and then setting the systemd unit file name, for
+example.
+
+Because of this new detection mechanism, it is impossible to suggest upstream a
+change like this patch and, at the same time, backporting this new code could
+bring more problems. Instead, this patch should be kept until a new merge with
+upstream is done.
+
+This temporary patch fixes the NFS service name for Debian & Ubuntu.
+
+Signed-off-by: Rafael David Tinoco <rafaeldtinoco@ubuntu.com>
+
+Bug-Debian: https://bugs.debian.org/929931
+Bug-Ubuntu: https://bugs.launchpad.net/bugs/722201
+Last-Update: 2018-06-26
+---
+ ctdb/config/events/legacy/60.nfs.script | 4 ++--
+ ctdb/config/nfs-linux-kernel-callout | 3 +++
+ ctdb/config/statd-callout | 4 ++--
+ 3 files changed, 7 insertions(+), 4 deletions(-)
+
+diff --git a/ctdb/config/events/legacy/60.nfs.script b/ctdb/config/events/legacy/60.nfs.script
+index 2eb90b421c8..5c6a0903322 100755
+--- a/ctdb/config/events/legacy/60.nfs.script
++++ b/ctdb/config/events/legacy/60.nfs.script
+@@ -6,9 +6,9 @@
+
+ . "${CTDB_BASE}/functions"
+
+-service_name="nfs"
++service_name="nfs-kernel-server"
+
+-load_system_config "nfs"
++load_system_config "nfs-kernel-server"
+
+ load_script_options
+
+diff --git a/ctdb/config/nfs-linux-kernel-callout b/ctdb/config/nfs-linux-kernel-callout
+index 12ed17c6d9e..94111f10eb7 100755
+--- a/ctdb/config/nfs-linux-kernel-callout
++++ b/ctdb/config/nfs-linux-kernel-callout
+@@ -32,6 +32,9 @@ systemd-*)
+ : # Defaults only
+ ;;
+ *-debian)
++ nfs_service="nfs-kernel-server"
++ nfs_lock_service=""
++ nfs_config="/etc/default/nfs-kernel-server"
+ nfs_rquotad_service="quotarpc"
+ ;;
+ *)
+diff --git a/ctdb/config/statd-callout b/ctdb/config/statd-callout
+index b75135bbde5..db437a96d45 100755
+--- a/ctdb/config/statd-callout
++++ b/ctdb/config/statd-callout
+@@ -21,14 +21,14 @@ die ()
+ }
+
+ # Try different variables to find config file for NFS_HOSTNAME
+-load_system_config "nfs" "nfs-common"
++load_system_config "nfs" "nfs-common" "nfs-kernel-server"
+
+ [ -n "$NFS_HOSTNAME" ] || \
+ die "NFS_HOSTNAME is not configured. statd-callout failed"
+
+ ############################################################
+
+-ctdb_setup_state_dir "service" "nfs"
++ctdb_setup_state_dir "service" "nfs-kernel-server"
+
+ # script_state_dir set by ctdb_setup_state_dir()
+ # shellcheck disable=SC2154
+--
+2.20.1
+
diff --git a/debian/patches/series b/debian/patches/series
index 12a18e8f2c1..6b807b89406 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -8,7 +8,5 @@ add-so-version-to-private-libraries
heimdal-rfc3454.txt
nsswitch-Add-try_authtok-option-to-pam_winbind.patch
smbd.service-Run-update-apparmor-samba-profile-befor.patch
-CVE-2019-3880-v4-9-02.patch
-CVE-2019-3870-v4-9-04.patch
-CVE-2018-16860-v4-9-06.patch
-CVE-2019-12435-4.9-03.patch
+fix-nfs-service-name-to-nfs-kernel-server.patch
+ctdb-config-depend-on-etc-ctdb-nodes-file.patch
diff --git a/debian/rules b/debian/rules
index 4c2e9df6e40..54b40c5857c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -12,6 +12,7 @@ include /usr/share/dpkg/pkg-info.mk
DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
DEB_HOST_ARCH_OS ?= $(shell dpkg-architecture -qDEB_HOST_ARCH_OS)
DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
+DEB_HOST_ARCH_CPU ?= $(shell dpkg-architecture -qDEB_HOST_ARCH_CPU)
PYVERS=$(shell pyversions -vr)
@@ -48,7 +49,7 @@ conf_args = \
--with-syslog \
--with-utmp \
--with-winbind \
- --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_tdb2,vfs_dfs_samba4,auth_samba4 \
+ --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_tdb2,vfs_dfs_samba4,auth_samba4,vfs_nfs4acl_xattr \
--with-automount \
--with-ldap \
--with-ads \
@@ -170,6 +171,7 @@ endif
# such as OpenRC's opentmpfiles
mkdir -p $(DESTDIR)/usr/lib/tmpfiles.d
echo "d /run/samba 0755 root root -" > $(DESTDIR)/usr/lib/tmpfiles.d/samba.conf
+ echo "d /run/ctdb 0755 root root -" > $(DESTDIR)/usr/lib/tmpfiles.d/ctdb.conf
override_dh_installdocs-arch:
cp ctdb/config/events/README ctdb/README.eventscripts
@@ -185,6 +187,16 @@ endif
override_dh_python2:
dh_python2 --no-guessing-versions
+override_dh_installexamples-arch:
+ # CTDB config examples and helper scripts
+ mkdir -p ctdb/doc/examples/nfs-kernel-server
+ cp debian/ctdb.example.enable.nfs.sh ctdb/doc/examples/nfs-kernel-server/enable-nfs.sh
+ cp debian/ctdb.example.nfs-common ctdb/doc/examples/nfs-kernel-server/nfs-common
+ cp debian/ctdb.example.nfs-kernel-server ctdb/doc/examples/nfs-kernel-server/nfs-kernel-server
+ cp debian/ctdb.example.services ctdb/doc/examples/nfs-kernel-server/services
+ cp debian/ctdb.example.sysctl-nfs-static-ports.conf ctdb/doc/examples/nfs-kernel-server/99-nfs-static-ports.conf
+ dh_installexamples
+
override_dh_installchangelogs:
dh_installchangelogs
@@ -275,3 +287,4 @@ override_dh_auto_clean:
rm -f .lock-wscript
rm -f ctdb/README.eventscripts
rm -f ctdb/README.notification
+ rm -rf ctdb/doc/examples/nfs-kernel-server/
diff --git a/debian/samba-libs.install b/debian/samba-libs.install
index 175001cadb7..39dc31d076b 100755
--- a/debian/samba-libs.install
+++ b/debian/samba-libs.install
@@ -13,7 +13,7 @@ usr/lib/*/libsamba-credentials.so.0*
usr/lib/*/libsamba-errors.so.*
usr/lib/*/libsamba-hostconfig.so.*
usr/lib/*/libsamba-passdb.so.0
-usr/lib/*/libsamba-passdb.so.0.27.1
+usr/lib/*/libsamba-passdb.so.0.27.2
usr/lib/*/libsamba-policy.so.*
usr/lib/*/libsamba-util.so.*
usr/lib/*/libsamdb.so.*
--- End Message ---