NAS-107504 / 11.3 / Fix update.destroy_upload_location

NAS-107506 / 11.3 / correctly reload resolvconf when updating search domains

NAS-107479 / 11.3 / Account that, for some reason, some RAID cards that are flashed to IT…

Account that, for some reason, some RAID cards that are flashed to IT mode are registered with the ciss driver although they really do JBOD

NAS-106110 / 11.3 / Donot raise UPS alert during self test (by sonicaj)

There are some UPS models which run a self test at scheduled intervals where they go on battery and back during the test. We should not raise an alert in this case as this is scheduled and expected and gives a false alarm.

Fix SMB share bind ip check

(cherry picked from commit 399988e5)

NAS-107432 / 11.3 / disable offload capabilitie in interface test for core only (by ericbsd)

NAS-107440 / 11.3 / Changing network test 03 to more automated and to not rely on config (by ericbsd)

this will prevent jail, plugins and vm to affect NAS network

(cherry picked from commit 4cf22a1f)

added test to verify network general summary new nameservers
added test to verify network general summary default routes
added test to verify network general summary ips

(cherry picked from commit 1a4fdc6e)

move network test before interface test in runtest.py

NAS-107437 / 11.3 / Expand validation for user home directories

Re-implement validation from legacy_ui preventing users from setting zpool
mountpoints as a home directory.

Require owner read and execute on a home directory.

NAS-107438 / 11.3 / Reintroduce special behavior for HOMES path

The SMB plugin had undocumented behavior prior to 11.3 whereby in LDAP
enviorments, administrators could leave the SMB path empty for HOMES
shares and thereby allow samba to auto-generate the path based on the
user's home directory path configured on the remote LDAP server.

NAS-107315 / 11.3 / fix rsync mem leak when snapdir = visible (by yocalebo)

Backport extra SMB validation from 12.0

NAS-107104 / 11.3 / Properly renew ACME certs (by sonicaj)

This commit fixes an issue where SAN is added by default for CN as it's become a standard now, so DNS mapping may/may not have all the domain mappings for the prefixes, we fix that here.

(cherry picked from commit 7cea705f)

NAS-107367 / 11.3 / Correctly handle ACME certs using SAN (by sonicaj)

When domain names are specified for SAN, we prefix them with 'DNS:' following with the cert standards, during acme authorisation, ACME server strips them and sends the authorisation for the domain name. We should handle this gracefully and strip out the prefix on our end as well confirming authorisation for the ACME order.

(cherry picked from commit f523e4a7)

NAS-107242 / 11.3 / Do not permit NetBIOS information changes while AD is enabled. (by anodos325)

Our NetBIOS name is inextricably linked to our AD computer account.
Changing these parameters on a production system may results in
service disruption for AD.

NAS-107254 / 11.3 / Add basic tests for filesystem permissions API (by anodos325)

NAS-107086 / 11.3 / Remove devd rc script, we fix this in freenas/os

Tests for POSIX permissions endpoints including basic functional
tests to determine that OS is doing the right thing as well.

(cherry picked from commit f90e04b9)

NAS-107252 / 11.3 / Allow chown back to uid / gid 0 in pool.dataset.permission

NAS-105654 / 11.3 / Add regression test for safe handling of private middleware plugin attributes

NAS-107227 / 11.3 / Add more ACL regression tests

This set of regression tests verifies that the individual
ACL permissions bits grant no more access than is expected from them.

Regression tests are also added to validate behavior of EXECUTE on
files.

NAS-107215 / 11.3 / Add functional tests for ZFS ACLs

Verify that ALLOW and DENY ACEs do the right thing on the OS-side.