NAS-138909 / 25.10.1 / Fix handling of validation of non-existing gro…

…ups (by anodos325) (#17818)

This commit fixes a typo introduced by adding more validation in the
audit group configuration form (to check whether group has associated
sid value).

Original PR: #17815

Co-authored-by: Andrew Walker <andrew.walker@truenas.com>

NAS-138056 / 25.10.0.1 / Do not send job events for non-authenticated…

… sessions (by themylogin) (by bugclerk) (#17623)

Original PR: #17420


Original PR: #17430

Co-authored-by: themylogin <themylogin@gmail.com>

NAS-138229 / 25.04.2.6 / Revert NFS share host and network entry limi…

…ter (#17462)

This PR extends the revert of the limiter in api v25_04_0 to v25_04_1
and v25_04_2.

NAS-138130 / 25.10.0 / Robustize DC lookup for non-windows DNS in AD …

…(by anodos325) (by bugclerk) (#17415)

This commit robustizes the lookup of domain controllers when a domain is
using third-party DNS services instead of windows server integrated DNS.
This is achieved by stopping us from performing a `net ads lookup`
(cldap ping) specifying only the realm / domain, and instead calls `net
ads info` first to lock in a server affinity to a particular DC in our
AD site before issuing the lookup to resolve the netbios domain and site
information.

Original PR: #17413


Original PR: #17414

---------

Co-authored-by: Andrew Walker <andrew.walker@truenas.com>

NAS-138074 / 25.04.2.5 / Revert "Add limit to the number of entries i…

…n the NFS share host and … (#17402)

…network lists. (#15442)"

This reverts commit 702a237.

We must take a different approach to this since it breaks existing
community users and customers and the fallout is that the NFS shares
section of the UI doesn't display. Furthermore, there is no way for the
user to get themselves out of this scenario.

NAS-137754 / 25.10-RC.1 / Fix CORS for TNC production (by sonicaj) (#…

…17271)

NAS-137471 / 25.04.2.4 / Revert NAS-137424 call failover.become_passi…

…ve in system.reboot on HA (#17156)

This reverts commit 52eaaea. This has
introduced 2 new regressions that are easily solved but the risk is not
worth the payout for 25.04.2.4 especially since this is related to HA.

NAS-137121 / 25.10-BETA.1 / Clear authentication state on logout (by …

…anodos325) (#17069)

There are some situations in which an API client may keep a websocket
connection open after logout and then log back in. Due to us storing the
old authenticated_credentials in the object associated with the
websocket connection, this caused the audit message to be logged against
the last logged-in user account rather than properly reflecting the
authenticated user as "UNAUTHENTICATED" at that time. This commit clears
the authentication_context (pam handle) and the
autheneticated_credentials on user logout to prevent them from ever
being reused.

Original PR: #17068

Co-authored-by: Andrew Walker <andrew.walker@truenas.com>

NAS-137219 / 25.04.2.3 / Fix generation of hostnqn and hostid when fi…

…les are previously missing (by bmeagherix) (#17018)

NAS-137123 / 25.04.2.2 / bump max_tasks_per_child to 100 so process p…

…ool doesn't crash (by yocalebo) (#16976)

Internal testing has found that sending a specific set of disk events
will cause all children in the process pool to crash silently and never
recover. This looks like a proper upstream bug in python. The crash
occurs because we're exhausting the children in the pool AND each child
will execute 20 tasks before being killed and re-created. This was
reproduced by a trivial 3-5 line python script. Bumping this value to
100 prevented the script from crashing process pool and fixed the issue
we were seeing on internal hardware. This is the path of least
resistance and a stop-gap solution as we are rapidly working towards
getting rid of our process pool entirely. This will work for now.

Original PR: #16963

Co-authored-by: Caleb <yocalebo@gmail.com>