[SCM] Samba Shared Repository - branch master updated

[Andrew Bartlett]

The branch, master has been updated
       via  b367382 WHATSNEW: Mention new option "apply group policies"
       via  e10de35 gpo: Correct WHATSNEW
       via  c90cf06 gpo: Correct documentation
       via  83d4220 WHATSNEW: Add section for "samba-tool visualize"
      from  925dc87 talloc_zero libnet_context on init

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit b3673824adc16a2b26c5fd3c661062d95c3c83eb
Author: Andrew Bartlett <abartlet at samba.org>
Date:   Tue Jan 16 16:25:38 2018 +1300

    WHATSNEW: Mention new option "apply group policies"
    
    BUG: https://bugzilla.samba.org/show_bug.cgi?id=13223
    
    Signed-off-by: Andrew Bartlett <abartlet at samba.org>
    Reviewed-by: Garming Sam <garming at catalyst.net.nz>
    
    Autobuild-User(master): Andrew Bartlett <abartlet at samba.org>
    Autobuild-Date(master): Thu Feb  1 07:57:54 CET 2018 on sn-devel-144

commit e10de35fabd728e0a81ec1d331255d12bef19686
Author: David Mulder <dmulder at suse.com>
Date:   Mon Jan 15 08:20:08 2018 -0700

    gpo: Correct WHATSNEW
    
    The WHATSNEW incorrectly explains how to enable gpo.
    
    BUG: https://bugzilla.samba.org/show_bug.cgi?id=13223
    
    Signed-off-by: David Mulder <dmulder at suse.com>
    Reviewed-by: Garming Sam <garming at catalyst.net.nz>
    Reviewed-by: Andrew Bartlett <abartlet at samba.org>

commit c90cf067e6822d742276beee3b73151994f81d8b
Author: David Mulder <dmulder at suse.com>
Date:   Mon Jan 15 11:37:47 2018 -0700

    gpo: Correct documentation
    
    The doc still contains a reference to env var
    policy (which isn't present in this release).
    
    BUG: https://bugzilla.samba.org/show_bug.cgi?id=13223
    
    Signed-off-by: David Mulder <dmulder at suse.com>
    Reviewed-by: Garming Sam <garming at catalyst.net.nz>
    Reviewed-by: Andrew Bartlett <abartlet at samba.org>

commit 83d42203d7d7f7171d44724720fa5cd99590b90b
Author: Andrew Bartlett <abartlet at samba.org>
Date:   Tue Jan 16 16:23:39 2018 +1300

    WHATSNEW: Add section for "samba-tool visualize"
    
    (text from the commit message by Douglas adding the feature)
    
    BUG: https://bugzilla.samba.org/show_bug.cgi?id=13226
    
    Signed-off-by: Andrew Bartlett <abartlet at samba.org>
    Reviewed-by: Garming Sam <garming at catalyst.net.nz>

-----------------------------------------------------------------------

Summary of changes:
 WHATSNEW.txt                                    | 26 ++++++++++++++++++++++++-
 docs-xml/smbdotconf/domain/gpoupdatecommand.xml |  9 ++++-----
 2 files changed, 29 insertions(+), 6 deletions(-)


Changeset truncated at 500 lines:

diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index f2da373..6cc362d 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -27,7 +27,7 @@ renew lifetime).
 Adds the samba_gpoupdate script for applying and unapplying
 policy. Can be applied automatically by setting
 
- 'server services = +gpoupdate'.
+ 'apply group policies = yes'.
 
 Time Machine Support with vfs_fruit
 -----------------------------------
@@ -88,6 +88,29 @@ The key file "encrypted_secrets.key" is created in the same directory
 as the database and should NEVER be disclosed.  It is included by the
 samba_backup script.
 
+Active Directory replication visualisation
+------------------------------------------
+
+To work out what is happening in a replication graph, it is sometimes
+helpful to use visualisations. We introduce a samba-tool subcommand to
+write Graphviz dot output and generate text-based heatmaps of the
+distance in hops between DCs.
+
+There are two subcommands, two graphical modes, and (roughly) two modes of
+operation with respect to the location of authority.
+
+`samba-tool visualize ntdsconn` looks at NTDS Connections.
+`samba-tool visualize reps` looks at repsTo and repsFrom objects.
+
+In '--distance' mode (default), the distances between DCs are shown in
+a matrix in the terminal. With '--color=yes', this is depicted as a
+heatmap. With '--utf8' it is a lttle prettier.
+
+In '--dot' mode, Graphviz dot output is generated. When viewed using
+dot or xdot, this shows the network as a graph with DCs as vertices
+and connections edges. Certain types of degenerate edges are shown in
+different colours or line-styles.
+
 NT4-style replication based net commands removed
 ------------------------------------------------
 
@@ -171,6 +194,7 @@ smb.conf changes
 
   Parameter Name                     Description             Default
   --------------                     -----------             -------
+  apply group policies               New                     no
   auth methods                       Removed
   binddns dir                        New
   client schannel                    Default changed/        yes
diff --git a/docs-xml/smbdotconf/domain/gpoupdatecommand.xml b/docs-xml/smbdotconf/domain/gpoupdatecommand.xml
index 147751b..3ce26d7 100644
--- a/docs-xml/smbdotconf/domain/gpoupdatecommand.xml
+++ b/docs-xml/smbdotconf/domain/gpoupdatecommand.xml
@@ -6,11 +6,10 @@
 <description>
 	<para>This option sets the command that is called to apply GPO policies.
         The samba_gpoupdate script applies System Access and Kerberos Policies
-	to the KDC, or Environment Variable policies to client machines. System
-	Access policies set minPwdAge, maxPwdAge, minPwdLength, and
-	pwdProperties in the samdb. Kerberos Policies set kdc:service ticket
-	lifetime, kdc:user ticket lifetime, and kdc:renewal lifetime in
-	smb.conf.
+	to the KDC. System Access policies set minPwdAge, maxPwdAge,
+	minPwdLength, and pwdProperties in the samdb. Kerberos Policies set
+	kdc:service ticket lifetime, kdc:user ticket lifetime, and kdc:renewal
+	lifetime in smb.conf.
 	</para>
 </description>
 


-- 
Samba Shared Repository