[SCM] Samba Shared Repository - annotated tag release-3-5-0pre1 created

Karolin Seeger kseeger at samba.org
Thu Nov 26 06:52:18 MST 2009


The annotated tag, release-3-5-0pre1 has been created
        at  fd55b19670c84a07642a21503f922c6b2122fdc4 (tag)
   tagging  31c172264473241b7edf20e1dca80adf10ca7882 (commit)
  replaces  tevent-0-9-8
 tagged by  Karolin Seeger
        on  Thu Nov 26 14:51:16 2009 +0100

- Log -----------------------------------------------------------------
tag release-3-5-0pre1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)

iD8DBQBLDofgbzORW2Vot+oRAiIiAJwKTiPqYRUHk9e5rR5p6NoOZs/Q+wCdFJvs
WEFixx9NkFveOd/ND4eQJKA=
=m0Yb
-----END PGP SIGNATURE-----

Abhidnya Chirmule (1):
      To set file create/birth time in GPFS. Signed-off-by: Abhidnya Chirmule <achirmul at in.ibm.com>

Abhidnya P Chirmule (1):
      s3: Add access_mask to the flock VFS call

Anatoliy Atanasov (14):
      Fill the meta data vector in the responce struct.
      Fix up-to-dateness vector creation.
      Fix up-to-dateness vector creation.
      Add drs_security_level_check for dcesrv calls security checks
      Move replmd_drsuapi_DsReplicaCursor2_compare to a common place.
      Handle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c
      Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Add support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Move the check above the talloc
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_CRITICAL_ONLY req in getncchanges
      idl: regenerate idl
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_SYNC_PACKET in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_ASYNC_REP in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_SPECIAL_SECRET_PROCESSING in getncchanges

Andrew Bartlett (32):
      s4:setup Add DisplaySpecifiers from Microsoft.
      s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etc
      s4:idl Add generated code for netlogon.idl changes
      s4:provision Don't reference provision_backend when using LDB
      libcli:drsuapi Add function to encrypt data for transport over DRSUAPI
      s4:provision Only delete SASL mappings with Fedora DS, not OpenLDAP
      s4:setup Updated Display Specifiers from Microsoft (with #s)
      s4:rpc_server netgotiate max xmit size with RPC client
      s4:kdc In the kpasswd server, don't use the client address in mk_priv
      s4:heimdal_build Love pointed me at the --one-code-file option to asn1_compile
      s4:heimdal_build Fix build breakages caused by asn1compile change
      s4:provision Prevent some invalid combinations of realm and domain
      libcli:nbt make the lmhosts parsing code and dependicies common
      s4:schema Add code to provide an index into the subClass tree
      libcli:nbt put util_net.c protos in new header file
      s4:utils Explian fix for testparm -v
      libcli:nbt move prototypes of lmhosts functions to libnbt.h
      s4:dsdb Print the partition we failed to suggest replication for
      s4:utils Remove typo...
      s4:provision split provision of DNS zone and self join keytab
      s4:ldb print out which LDB the transaction is still active on.
      s4:provision Use code to store domain join in 'net join' as well
      s4:py_security Add missing header
      s4:provision Make us Windows 2008 level by defualt again
      s4:provision Make our default salt match our server behaviour
      s4:kerberos Fix the salt to match Windows 2008.
      s4:dsdb Run the new 'descriptor' module by default.
      s4:ldb Add 'single-value' support to LDB.
      s4:ldif_handlers Fix memory leak in objectCategory LDIF handler
      lib/util Add rfc1738 escape/unescape code from Squid
      lib/util Use rfc1738.c from Squid for all our URL encode/decode needs.
      lib/util Fix comments in rfc1738.c.

Andrew Klosterman (1):
      s3:smbd: Fix bug 6690, wrong error check

Andrew Kroeger (19):
      selftest: Account for 0-based months in date parsing and printing.
      util:tests: Correct time tests for negative UTC offsets.
      s4:setup: Change license headers to LDIF comments.
      s4:setup: Added script to parse Microsoft DisplaySpecifiers document.
      s4:setup: Use ms_display_specifiers script for provision.
      s4:setup: Updated comment to reflect new DisplaySpecifiers location.
      s4:setup: Remove display_specifiers.ldif.
      gitignore: Ignore additional auto-generated files.
      s4:pwsettings: Correct off by factor of 10 for ticks.
      s4:pwsettings: Added --quiet option.
      s4:pwsettings: Run all updates as a single modify() operation.
      s4:pwsettings: Don't assume a value for pwdProperties.
      s4:pwsettings: Added validation.
      s4:pwsettings: Add 'default' option for password complexity.
      s4:pwsettings: Show default values in help messages.
      testprogs:subunit.sh: Add function for expected failures.
      s4:pwsettings: Added blackbox tests.
      s4:srvsvc: Fix logic on error checking.
      s4:ldb_map: Don't free ares too early.

Andrew Tridgell (300):
      s4: the secrets.ldb module needs the loadparm opaque setup
      s4: fixed the secrets.ldb construction in libnet
      s4: bring nsupdate-gss into the s4 tree
      s4:nsupdate-gss allow forcing of the realm
      s4:setup_dns.sh fixed the update of the GUID CNAME
      s4: fixed some shadowed variable warnings
      s4: removed an unused variable
      s4: fixed a unsigned printf warnings
      s4: 'index' is a libc function
      s4/ldb: fixed spelling
      s4: implemented server side of DSUpdateRefs call
      s4: fixed updaterefs options bitmap
      s4: added the structure for repsTo
      s4: commit generated DRS changes
      s4/ldb: added --show-binary command line option
      s4/ldb: don't line wrap ldif when --show-binary is used
      s4/ldb: expose the ldb flags with ldb_get_flags()
      s4/ldb: added ldif handler for repsFrom/repsTo
      s4/ldb: allow printing ntSecurityDescriptor in full
      s4/ldb: allow prefixMap to be shown as NDR
      s4/ldb: support NDR printing for 2 more replication types
      s4: allow repl:RODC=true/false to set ourselves as a RODC
      s4: fixed format of repsTo in samdb
      s4/repl: added refresh of repsTo
      s4/repl: implement DsReplicaSync
      s4:drs split addentry and getncchanges into separate files
      s4:drs level_out is a pointer
      s4/drs: broke out the core of the getncchanges code
      s4:drs match the meta_data and attributes array
      s4/vampire: fixed i/j index mixup in vampire code
      s4/drs: when we don't find an attribute use zero values
      s4/drsuapi: tech the IDL about some more key attribute names
      s4/schema: don't crash if we don't have subClassOf
      s4/schema: teach the schema_syntax code how to encode/decode more attributes
      s4: regenerate drsuapi IDL
      s4/torture: don't mix declarations and code
      s4/provision: another fix for breakage from b1dabb1133
      s4: fix spelling
      s4/drs: correctly fill in the GUID of DRS objects
      s4/drs: changed the UpdateRefs server to use the dn instead of the GUID
      libcli: added a drsuapi attribute encryption function
      s4/repl: give a useful error message if we can't decode an object
      s4: kludge_acl needs to be above repl_meta_data
      s4/drs: enable attribute encryption
      s4/torture: fixed lots of crash bugs in the DRS tests
      s4/libcli: when we get a DNS lookup failure show the name
      s4/drs: parentGUID needs to be specififcally asked for
      s4/provision: add the nTDSDSA GUID based DNS entries and SPNs
      s4-drs: add the magic DRS SPNs on AddEntry
      s4-drs: actually call the new drsuapi_add_SPNs() code
      s4-provision: use DNS name, not domain name
      s4-ldb: don't remove a message element beyond the end of the array
      s4-repl: don't add the RDN if it is already there
      s4-repl: on every ldb modify we need to update replPropertyMetaData
      s4-idl: added the IDL for the DsReplica* calls
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      s4-idl: added the IDL for the DsReplica* calls
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: refresh the partitions on each cycle
      s4-provision: revert _gc_tcp priority
      s4-drs: fixed the ldap SPN in AddEntry
      s4-vampire: cope with no invocationID when vampiring the schema
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-samdb: internal s4 ldb modules should be GPL not LGPL
      s4-repl: don't be too eager to allocate new sequence numbers
      s4-drs: spelling fix, and simpler search expression
      s4-drs: return objects with uSN > highest_usn
      s4-drs: also fill in tmp_highest_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-ndr: fixed memory leaks in ndr_pull_*_blob()
      s4-repl: fixed memory leaks
      s4-drs: change debug level
      s4-samdb: make it possible to ask for the sequence number of a partition
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-scripts: allow setup_dns.sh to take a PRIVATEDIR
      Merge branch 'master' of /home/tridge/samba/git/combined
      ndr: added --ndr64 flag to ndrdump
      idl: added DsExecuteKCC IDL
      idl: rebuild drsuapi.idl
      idl: added DRS GetNCChanges level 10
      s4-repl: keep a @REPLCHANGED object on each partition
      s4-sam: allow a search to specify a partition
      s4-dsdb: added dsdb_load_partition_usn and dsdb_save_partition_usn
      s4-repl: use the new dsdb partition uSN helper fns
      s4-drs: fixed search expression
      s4-repl: added a preiodic notification check to the repl task
      s4-repl: fall back to repsFrom if repsTo not set
      s4-repl: fixed a memory error handling linked attributes
      s4-drs: allow replication of renames
      s4-repl: handle rename in repl_meta_data
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-libnet: use updated dsdb commit function
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
      s4-drs: lock down key DRS calls
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-rpc: added a module for forwarding RPC requests
      s4-repl: take advantage of async RPC forwarding
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      idl: regenerate IDL for NDR64 changes
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      s3-rpc: samba3 needs the DCERPC_NDR64 define
      talloc: don't crash if f is NULL in talloc_report_*
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-drs: cope with dupliate linked attributes
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kdc: ignore unknown keytypes
      s4-server: kill main daemon if a task fails to initialise
      s4-pipes: convert pipe names to lowercase and validate
      s4-resolve: fixed a crash bug on timeout
      s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW
      pidl: update expected output for NDR64 changes
      s4-rpc: remove some unnecessary #include lines
      s4-rpc_server: removed remaining unnecessary #includes
      s4-testparm: fixed -v option
      s4-smbd: minimise includes in smbd/ and smb_server
      s4-scripts: make minimal_includes handle our -I overrides
      s4-smbd: removed unnecessary includes
      tdb: increase minor version
      more include minimisation
      s4-ldb: bump minimum version in ldb too
      s4-repl: need param.h for lp_parm_bool
      s4-ldb: display an error if we can't decode a NDR blob
      s4-drs: security checking on DRS needs to default to on
      s4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account
      talloc: fixed talloc_disable_null_tracking()
      s4-selftest: disable RPC-COUNTCALLS
      s4-selftest: disable RAP-SCAN test
      s4-dsdb: fixed a printf format warning
      s4-ldb: add support for extended DNs in the rootDSE
      s4-ldap: default edn type is 0
      s4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing
      s4-ldb: add --trace command line option to ldb tools
      s4-schema: don't trace the schema load (too verbose)
      s4-samdb: enable ldb tracing when log level >= 10
      s4-ldb: fixed O(n^2) string handling in ldif debug print
      s4-ldb: bit prettier output
      s4-ldb: don't show timestamps on every line of ldb traces
      s4-ldb: only show the outer level of ldb ops when tracing
      s4-rpc: remove two unused functions
      s4-rpcserver: run all RPC operations in a single task
      s4-rpcserver: added shared association groups
      s4-lsa: added support for QuerySecurity on LSA
      s4-rpcserver: added support for shared handles
      s4-torture: add some debug info to RPC-HANDLES
      s4-util: windows only accepts lowercase hex encodings for extended DNs
      s4-ldbmodules: allow instanceType to be specified by clients
      s4-ldb: when tracing, show ldb_set_debug messages
      s4-ldb: added a bunch more debug for DC join
      s4-ldb: fixed call argument order for ldb_dn_from_ldb_val
      s4-ldb: server side sort args are const char *
      s4-drsserver: sort by DN to give tree order
      s4-nbt: added NBT_SERVER_DNS_FOREST
      idl: fixed string termination for netlogon GetDomainInfo
      s4-cldap: return domainFunctionality from SAM
      s4-netlogon: make GetDomainInfo response match w2k8
      regenerate IDL
      s4-netlogon: always set the dNSHostName in GetDomainInfo
      s4-drs: ignore zero value elements in DRS add operations
      fixed spelling
      s4-drsserver: fixed addition of sort control
      s4-dsdb: added dsdb_find_sid_by_dn()
      s4-dsdb: cope with windows sending extra pad bytes
      s4-drs: fill in more guids and SIDs, plus filter rDN
      s4-libnet: avoid a steal with references error
      s4-libnet: allow the functional level of becomeDC to be specified
      s4-drs: add SHOW_DELETED control on dsdb utility calls
      s4-drs: include deleted objects in getncchanges reply
      s4-drs: fixed the size of DN binary blobs on the wire
      s4-ldb: add instanceType in repl_meta_data module
      s4-ldb: sort replPropertyMetaData by attid
      s4-drs: add defines for replication flags on attributes
      s4-drs: regenerate IDL after ndr size change
      s4-drs: el may not be a talloc pointer
      s4-drs: fixed sorting of replPropertyMetaData
      libds: fixed spelling error
      s4-acl: fixed SD creation
      s4-dsdb: make dsdb_search_dn_with_deleted public for repl_meta_data module
      s4-dsdb: ask for an extended DN in dsdb_find_dn_by_guid()
      s4-repl: use GUID to resolve target in linked attributes
      s4-samdb: free the linked_attributes list on prepare commit failure
      s4-repl: free the la list on prepare commit failure
      s4-samdb: when UF_SERVER_TRUST_ACCOUNT is set mark object as critical
      s4-ldap: fixed spelling
      s4-drsutil: allow NULL filter
      s4-dsruapi: plugfest updates
      s4-drsuapi: state variable for getncchanges
      s4-drs: removed debug code that replicated a maximum of 10 objects at a time
      s4-dsdb: fixed searching for GUID based DNs between partitions
      s4-dsdb: update replPropertyMetaData on linked attribute source attributes
      s4-dsdb: removed extraneous debug messages
      s4-libnet: fixed debug formatting
      s4-make: add libds to etags/ctags source list
      s4-dsdb: don't return the partition root objects
      s4-kcc: remove stale repsFrom entries in kcc run
      s4-kcc: fixed corruption of repsFrom records by kcc
      pidl: added union padding for NDR64
      idl: ntsvcs.idl depends on misc.idl, not winreg.idl
      torture: fixed socket leak in BENCH-TCON test
      s3: Fix vfs_shadow_copy2 to allow in-path @GMT-xxx
      s3: fixed krb5 build problem on ubuntu karmic
      idl: added bit definition for privilege masks
      s4-torture: take privileges into account in BASE-MAXIMUM_ALLOWED
      util: fixed generate_unique_strs() to be portable
      tdb: fixed the intermittent failure of tdbtorture in the build farm
      lib-util: check for too many combinations in generate_unique_strs()
      s4-idl: don't call a variable 'stat'
      s4-dsdb: fixed empty structure error on solaris8
      s4-torture: fixed a fd/mem leak in the RPC-LSA-SECRETS test
      s4-torture: fixed a pipe leak
      s4-torture: catch bad command line options
      util: fixed place where we could look one byte past end of string
      s4-torture: fixed double free in libnet_group test
      tdb: detect tdb store of identical records and skip
      ndr64: added support for trailing gap alignment
      pidl: get the alignment right for uint1632 enums (NDR64)
      pidl: update PIDL tests for uint1632 enums
      tdr: teach TDR about uint1632 enums

Aravind Srinivasan (8):
      s4/torture: convert printf to torture_comment()
      s4/torture: add new SMB oplock tests
      vfs catia: Fix a possible NULL dereference
      vfs catia: Fix the double translation that was happening with createfile and open.
      vfs catia: Fix a NULL dereference when CATIA is loaded with no mappings specified.
      s4/torture: convert printf to torture_comment()
      s4/torture: change comments to torture_failures
      s4/torture: Add SMB sharemode/access mask tests

Barry Sabsevitz (1):
      Fix bug 6802 - A created folder does not properly inherit permissions from parent.

Björn Jacke (53):
      s3:examples:ldap: fix some OIDs in various schema files
      s3:examples:ldap: allow substing search on more attributes in nds schema file
      nss_winbind: remove unused variable
      s3: BSD needs sys/sysctl.h included to build properly
      s3: ignore cups-config to tidy up library dependencies
      libreplace: white space cleanups
      s3: ignore cups-config to tidy up library dependencies
      s3:examples:ldap: fix some OIDs in various schema files
      s3:examples:ldap: allow substing search on more attributes in nds schema file
      nss_winbind: remove unused variable
      s3: BSD needs sys/sysctl.h included to build properly
      s3: build with pam support when possible
      s3: update comment about (deprecated) a6 records
      s3:configure: don't throw away PRINT_LIBS
      s3:Makefile: fix talloc dependencies with static build
      s3:doc: add some detail about lanman auth parameter
      s3:configure: use --aѕ-needed linker option when supported
      s3:Makefile: net utility dependency cleanup
      s3:Makefile: libsmbsharemode dependency cleanup
      Revert "s3:Makefile: fix talloc dependencies with static build"
      s3:Makefile: fix talloc dependencies with static build (2nd try)
      s3:Makefile: fix libtdb dependencies with static build
      s3:Makefile: fix libwbclient dependencies with static build
      s3:Makefile: eventlogadm dependency cleanup
      s3:Makefile: fix libnetapi dependencies with static build
      s3:Makefile: minor clean up
      Revert "s3:Makefile: fix libnetapi dependencies with static build"
      Revert "s3:Makefile: fix libwbclient dependencies with static build"
      Revert "s3:Makefile: fix libtdb dependencies with static build"
      Revert "s3:Makefile: fix talloc dependencies with static build (2nd try)"
      s3:Makefile: another attempt to fix the talloc dependency
      s3:Makefile: another attempt to fix the tdb dependency
      s3:Makefile: another attempt to fix the netapi dependency
      s3:Makefile: another attempt to fix the wbclient dependency
      s3: make linking of libwbclient --as-needed safe
      Ñ•3: fix domain trust documentation confusion
      s3: build pam_smbpass when possible
      s3:configure: fix avahi activation
      s3: allow using different LDFLAGS for internal libs/plugins
      s3: make unresolved symbols in libs throw errors
      s3:configure: add support for Solaris' ld -z ignore
      s3:net: fix output of net rpc trustdom list
      s3:net simplify padding to single printf call
      s3:net: simplify padding to single printf call
      s3:Makefile: rename LDSHFLAG variables to make meaning more obvious
      Ñ•3:buildsystem: fix depenencies for libreplace
      s3:Makefile: add LIBREPLACE_LIBS for talloc, tdb and wbclient
      Ñ•3:ldap: search for account policies in objectclass sambaDomain, not *
      s3:ldap: don't search when no values where found
      WHATSNEW: Update release notes
      s3: add support for full windows timestamps resolution on files
      s3/pam: move variable declaration into belonging ifdef section
      pam_winbind: fix a printf type mismatch warning

Björn Jacke (1):
      s3:Makefile: add some explicit dependencies to libc

Bo Yang (6):
      s3: Don't overwrite password in pam_winbind, subsequent pam modules
      s3: Don't overwrite password in pam_winbind, subsequent pam modules might use the old password and new password.
      s3: Fix reference to freed memory in pam_winbind.
      s3: Don't fail authentication when one or some group of require-membership-of is invalid.
      s3: Fix crash in pam_winbind, another reference to freed memory.
      s3: Fix kerberos refresh chain.

Christian Ambach (2):
      changed debuglevel for two messages in the GPFS module from 0 to 10 they spammed the logs on a test machine and they are just debug messages, so let's move them to the level of the other debug messages in the file
      add e2fsprogs-devel as build dependency this is needed for AD because it contains libcom/libcom_err files and headers

Dmitry Karasik (1):
      s4:wmic - Output enhancements

Endi Sukma Dewata (1):
      s4: Use SASL authentication against Fedora DS.

Günther Deschner (317):
      s3-ntlm_auth: fix two segfaults in diagnostics mode.
      wbinfo: fix various valgrind warnings and an invalid free.
      tdb: fix c++ build warning.
      s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.
      schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs.
      s3-rpc_client: use NL_AUTH_MESSAGE in create_schannel_auth_rpc_bind_req().
      s3-rpc_server: use NL_AUTH_MESSAGE in pipe_schannel_auth_bind().
      s3: remove unused RPC_AUTH_SCHANNEL_NEG struct and parsing functions.
      schannel: add missing prototype for ndr_print_nbt_string() in schannel helper.
      tdb: fix c++ build warning.
      s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.
      schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs.
      s3-rpc_client: use NL_AUTH_MESSAGE in create_schannel_auth_rpc_bind_req().
      s3-rpc_server: use NL_AUTH_MESSAGE in pipe_schannel_auth_bind().
      s3: remove unused RPC_AUTH_SCHANNEL_NEG struct and parsing functions.
      schannel: add missing prototype for ndr_print_nbt_string() in schannel helper.
      ntlmssp: add some void decode calls (useful for ndrdump).
      s3-nterr: add NT_STATUS_RPC_NT_CALL_FAILED.
      ntlmssp: avoid duplicate inclusion of helper headers.
      s3-winbindd: Fix Bug #6700: Use dns domain name when needing to guess server principal.
      s3-rpc_client: add enum dcerpc_transport_t to rpc_cli_transport struct.
      s3-rpcclient: add ncacn transport handling for rpcclient.
      s3-rpcclient: add lookupnames4 command.
      s3-util: add get/set_cmdline_auth_info_domain to user_auth_info struct.
      s3-nterr: add NT_STATUS_RPC_NT_PROTOCOL_ERROR to nt_errstr().
      schannel: more work on reponse NL_AUTH_MESSAGES.
      s3-schannel: use NL_AUTH_MESSAGE for schannel bind reply.
      s3-schannel: remove unused code.
      s3-errors: add NT_STATUS_RPC_NT_PROCNUM_OUT_OF_RANGE.
      s3-schannel: use NL_AUTH_SIGNATURE for schannel sign & seal (client & server).
      s3-schannel: remove last schannel hand-marshalling function.
      s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.
      s3-rpcclient: use cli_rpc_pipe_open_noauth_transport in rpcclient.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp and cli_rpc_pipe_open_ntlmssp.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().
      s3-rpcclient: avoid using lp_workgroup() unconditionally for crypto.
      s3-rpcclient: make netlogon credential setup also work for interdomain trusts.
      lsa: use lsa_LookupNamesLevel in lsa_LookupSids{2,3}.
      lsa: fill in more unknowns in lsa_LookupSid calls.
      s3-rpcclient: add lookupsids3 command.
      s4-smbtorture: fix remaining lsa lookup call unknowns. sorry...
      s3-schannel: add dump_NL_AUTH_SIGNATURE.
      s3-dcerpc: remove more obsolete or duplicate headers.
      s3-ntlmssp: add missing prototype.
      s3-rpcclient: Fix Coverity #935: UNINIT.
      s3-eventlogadm: Fix Coverity #938: UNINIT.
      s3-netapi: Fix Coverity #670: FORWARD_NULL.
      s3-netapi: Fix Coverity #669 FORWARD_NULL.
      s3-netapi: Fix Coverity #668: FORWARD_NULL.
      s3-schannel: fix api_pipe_schannel_process(), was using incorrect buffer length.
      s4-schannel: strip trailing whitespace.
      s4-schannel: use NL_AUTH_MESSAGE for schannel.
      s3-rpcclient: fix netr_LogonGetCapabilities command.
      s3-netlogon: match all logon levels in netr_SamLogon calls.
      s3-netlogon: support validation level 6 in netr_SamLogon calls.
      libcli/auth: remove trailing whitespace.
      spnego: share spnego_parse.
      spnego: add spnego_proto.h.
      cifs-upcall: fix the build after spnego merge.
      s3-winbindd: add and use winbindd_lookup_sids().
      s3-winbindd: add and use winbindd_lookup_names().
      s3-schannel: fix Coverity #950 OVERRUN_STATIC.
      s3-nterr: print a NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED.
      s3-netlogon: Fix Coverity #945 UNINIT.
      s3-samr: Fix Coverity #934 UNINIT.
      s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.
      s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.
      schannel: remove unused schannel structs.
      s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.
      s3-dcerpc: remove duplicate RPC_AUTH_LEVEL flags.
      s3-dcerpc: remove more unused structs.
      s3-dcerpc: remove unsed auth type defines as seen on the wire.
      ntlmssp: better document to what structures we are reffering to.
      ntlmssp: pretty print a VERSION structure.
      s3-dcerpc: fix remaining old auth level constants.
      s3-dcerpc: really fix remaining old auth level constants. sorry...
      lib/crypto: add aes encryption routines to main cryto lib.
      s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in
      s4-schannel: strip trailing whitespace.
      s4-schannel: first step of decoupling schannel from gensec.
      s4-schannel: try to fix the build.
      schannel: move schannel_sign to main directory.
      schannel: fully share schannel sign/seal between s3 and 4.
      s3-schannel: remove unused schannel_decode/schannel_encode.
      lib/crypto: link in AES crypto for s4 as well.
      schannel: remove last traces of gensec.
      ntlmssp: add some void decode calls (useful for ndrdump).
      s3-nterr: add NT_STATUS_RPC_NT_CALL_FAILED.
      ntlmssp: avoid duplicate inclusion of helper headers.
      s3-winbindd: Fix Bug #6700: Use dns domain name when needing to guess server principal.
      s3-rpc_client: add enum dcerpc_transport_t to rpc_cli_transport struct.
      s3-rpcclient: add ncacn transport handling for rpcclient.
      s3-rpcclient: add lookupnames4 command.
      s3-util: add get/set_cmdline_auth_info_domain to user_auth_info struct.
      s3-nterr: add NT_STATUS_RPC_NT_PROTOCOL_ERROR to nt_errstr().
      schannel: more work on reponse NL_AUTH_MESSAGES.
      s3-schannel: use NL_AUTH_MESSAGE for schannel bind reply.
      s3-schannel: remove unused code.
      s3-errors: add NT_STATUS_RPC_NT_PROCNUM_OUT_OF_RANGE.
      s3-schannel: use NL_AUTH_SIGNATURE for schannel sign & seal (client & server).
      s3-schannel: remove last schannel hand-marshalling function.
      s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.
      s3-rpcclient: use cli_rpc_pipe_open_noauth_transport in rpcclient.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp and cli_rpc_pipe_open_ntlmssp.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().
      s3-rpcclient: avoid using lp_workgroup() unconditionally for crypto.
      s3-rpcclient: make netlogon credential setup also work for interdomain trusts.
      lsa: use lsa_LookupNamesLevel in lsa_LookupSids{2,3}.
      lsa: fill in more unknowns in lsa_LookupSid calls.
      s3-rpcclient: add lookupsids3 command.
      s4-smbtorture: fix remaining lsa lookup call unknowns. sorry...
      s3-schannel: fix api_pipe_schannel_process(), was using incorrect buffer length.
      s4-schannel: strip trailing whitespace.
      s4-schannel: use NL_AUTH_MESSAGE for schannel.
      s3-schannel: fix Coverity #950 OVERRUN_STATIC.
      s3-nterr: print a NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED.
      s3-netlogon: Fix Coverity #945 UNINIT.
      s3-samr: Fix Coverity #934 UNINIT.
      s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.
      s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.
      schannel: remove unused schannel structs.
      s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.
      s3-dcerpc: remove duplicate RPC_AUTH_LEVEL flags.
      s3-dcerpc: remove more unused structs.
      s3-dcerpc: remove unsed auth type defines as seen on the wire.
      ntlmssp: better document to what structures we are reffering to.
      ntlmssp: pretty print a VERSION structure.
      s3-dcerpc: fix remaining old auth level constants.
      s3-dcerpc: really fix remaining old auth level constants. sorry...
      lib/crypto: add aes encryption routines to main cryto lib.
      s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in
      s4-schannel: strip trailing whitespace.
      s4-schannel: first step of decoupling schannel from gensec.
      s4-schannel: try to fix the build.
      schannel: move schannel_sign to main directory.
      schannel: fully share schannel sign/seal between s3 and 4.
      s3-schannel: remove unused schannel_decode/schannel_encode.
      lib/crypto: link in AES crypto for s4 as well.
      schannel: remove last traces of gensec.
      s3-schannel: add dump_NL_AUTH_SIGNATURE.
      s3-smbd: fix get_ea_names_from_file() and check for pnames pointer.
      s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.
      s3-winbindd: add cm_connect_lsa_tcp().
      s3-winbindd: Fix Bug #6711: trusts to windows 2008 (2008 r2) not working.
      s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np
      s3: remove unused printing macros.
      s3-winbindd: no reason to call winbindd_can_contact_domain() three times in query_user().
      s3-libndr: fix build warning.
      lib/util: fix build warning.
      winreg: add winreg_Data union to IDL.
      s3: re-run make idl_full.
      s3-util: add push_reg_sz() and push_reg_multi_sz() convenience functions.
      s3-registry: use push_reg_sz().
      s3-registry: add regval_ctr_addvalue_sz.
      s3-registry: use regval_ctr_addvalue_sz().
      s3: use push_reg_multi_sz().
      s3-util: add pull_reg_sz() and pull_reg_multi_sz() convenience functions.
      s3-registry: use pull_reg_multi_sz().
      s3-util: use pull_reg_multi_sz in reg_pull_multi_sz.
      s3: use pull_reg_multi_sz in rpcclient and net.
      s3-rpc_parse: remove unused UNISTR2 struct and init function.
      s3: remove unused regval_build_multi_sz().
      s3: remove unused regval_convert_multi_sz().
      s3: remove unused unistr2_term_codes.
      s3-netlogon: properly implement _netr_NetrEnumerateTrustedDomains().
      s3-registry: use pull_reg_sz() where appropriate.
      s3-printing: more use of pull_reg_sz().
      s3: remove unused rpcstr_pull and rpcstr_pull_talloc.
      s3-registry: move rpccli_winreg_Connect to the only file it belongs.
      s3: add perfcount idl and generated files.
      s3-perfcount: only pass down prs_struct when really required.
      s3-perfcount: more cleanup.
      s3-rpc_parse: remove unused prs_string.
      s3-registry: add regval_ctr_addvalue_multi_sz.
      s3-printing: use regval_ctr_addvalue_multi_sz.
      s3: re-run make idl. janitor for tridge.
      s3: remove unused SYSTEMTIME struct.
      s3: remove unused PRS_POINTER_CAST macro.
      lib/tdr: get rid of build warning when using TDR_ALLOC macro.
      s3-net: print error when "net rpc changetrustpw" has failed.
      s3-netlogon: setup NETLOGON credential chain in rpccli_netlogon_set_trust_password() only when needed.
      s3-winbindd: make sure to reset connections when machine account password change chain was broken.
      s3-netlogon: pure cosmetic indent fixes in _netr_LogonControl2Ex().
      libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      wbinfo: allow to check trusts via "wbinfo -t --domain DOMAINNAME".
      s3-winbindd: libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      s3-winbindd: NDR_WBINT_CHECKMACHINEACCOUNT should not be cacheable.
      s3-docs: remove xml artefact from net.8.xml.
      s3-netlogon: pass down account name to remote password set functions.
      s3-netlogon: allow to change any type of trust account password in trust_pw_find_change_and_store_it().
      s3: use enum netr_SchannelType all over the place.
      netlogon: add NL_PASSWORD_VERSION to IDL.
      docs: document wbinfo -t --domain DOMAIN behavior.
      libwbclient: add wbcChangeTrustCredentials.
      nsswitch: add wbinfo -c (change trust account passwords).
      docs: document wbinfo -c.
      s3-winbindd: add wbint_ChangeMachineAccount implementation.
      s3-passdb: missed two prototypes while moving to enum netr_SchannelType.
      s3-build: we need to have talloc 2.0.1 when building with external talloc.
      s3-spnego: Fix Bug #6815. Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
      s3-spnego: fix memleak in spnego_parse_auth().
      s3-net: fix build warning (missing default in switch).
      s4-smbtorture: add very basic libwbclient testsuite.
      s3-selftest: enable WINBIND-WBCLIENT against s3.
      s3-libnetapi: add I_NetLogonControl{2} to IDL.
      s3-libnetapi: add I_NetLogonControl{2} skeleton.
      s3-libnetapi: fill in I_NetLogonControl{2}_r.
      s3-libnetapi: add I_NetLogonControl{2} to public headers.
      s3-libnetapi: add I_NetLogonControl{2} example code.
      s3-libnetapi: add nltest tool.
      s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.
      s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.
      s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling.
      s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON.
      nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().
      s3-netlogon: fix updating trust accout passwords with downlevel domains.
      gitignore: remove old netlogon prototypes.
      s4-smbtorture: test wbcLookupDomainController{Ex} in WINBIND-WBCLIENT.
      libwbclient: fix wbcLookupDomainController().
      wbinfo: use wbcLookupDomainControllerEx for wbinfo --dsgetdcname.
      s4-smbtorture: move all LookupNames tests into RPC-LSA-LOOKUPNAMES.
      s4-smbtorture: add stricter tests for LSA-LOOKUPNAMES replies.
      s3-lsa: allow to have NULL strings in lsa LookupName queries.
      s3-lsa: When looking up domains in LookupNames, do not strip the sid.
      s3-lsa: allow to lookup BUILTIN\ in lsa_LookupNames.
      s3-lsa: Allow to lookup 'NT AUTHORITY\Anonymous Logon' as well.
      s4-smbtorture: split out EnumTrustedDomainsEx test in RPC-LSA-TRUSTED-DOMAINS.
      s4-smbtorture: Fix wrong comment in RPC-LSA-TRUSTED-DOMAIN test.
      s3-selftest: enable RPC-LSA-PRIVILEGES against Samba 3.
      s3-lsa: Fix _lsa_CreateAccount() for usage of SEC_FLAG_MAXIMUM_ALLOWED.
      s3-pdb_ldap: fix crash bug in ldapsam_set_trusteddom_pw().
      s3-lsa: Fix _lsa_EnumTrustDom().
      s4-smbtorture: Make it simpler to specify number of trusted domains to create in
      s4-smbtorture: fix RPC-LSA-LSALOOKUP test against w2k3 and w2k8.
      nsswitch: fix the build of the winbind krb5 locator plugin.
      s3-lsa: make s3 pass against RPC-LSA-LOOKUPNAMES again.
      s4-smbtorture: test whether an lsa_EnumTrustDom implementation would hang up a client.
      s3-lsa: Fix _lsa_EnumTrustDom() and avoid infite windows client loop.
      s4-lsa: Fix dcesrv_lsa_EnumTrustDom() and avoid infite windows client loop.
      s3-lsa: use enum lsa_LookupNamesLevel in lsa_lookup_level_to_flags().
      s3-lsa: pure cosmetic indentation fixes.
      s3-lsa: use correct function name in_lsa_RemoveAccountRights().
      lsa: add LSA_SECRET access masks.
      s3-lsa: add lsa_secret_mapping.
      s3-passdb: add secrets_delete_generic().
      lsa: add LSA_TRUSTED_DOMAIN access masks.
      s3-lsa: add lsa_trusted_domain_mapping.
      adssearch: dump some more nttime timestamps.
      s3-net: acct_flags are uint32_t in net_sam_set_userflag().
      s3-passdb: move open_schannel_session_store() to passdb/secrets_schannel.c.
      s3: add secrets.idl.
      s3-secrets: use autogenerated code for TRUSTED_DOM_PASS struct parsing from a tdb.
      s4-smbtorture: fix warning in RPC-WKSSVC torture test.
      s3-lsa: use switch in _lsa_QuerySecurity().
      s3-lsa: expand struct lsa_info to carry name and sd.
      s3-rpcclient: add createtrustdom command.
      s3-rpcclient: add deletetrustdom command.
      s4-smbtorture: skip bigendian tests against s3 in RPC-LSA-SECRETS.
      s3-gencache: restore gencache_get behavior with NULL args (with torture test).
      s3: re-run make samba3-idl.
      libndr: add int3264 ndr prototype.
      s3-passdb: cleanup some callers of pdb_get_trusteddom_pw().
      s4-smbtorture: simplify some torture_comments in RPC-LSA.
      s4-smbtorture: skip QueryDomainInformationPolicy test against s3 in RPC-LSA.
      s4-smbtorture: skip QueryInfoPolicy2 while running RPC-LSA against s3.
      s4-smbtorture: skip three info levels while testing s3 with RPC-LSA.
      s3-lsa: fill in some more info levels in _lsa_QueryInfoPolicy().
      s3-netlogon: implement remote trust account changing in netr_LogonControl2Ex() and friends.
      s3-netlogon: implement _netr_NETLOGON_INFO_4 in netr_LogonControl2Ex() and friends as well.
      s3-netlogon: let s3 pass against RPC-NETLOGON-S3 again.
      s3-netlogon: make sure we protect some function codes in _netr_LogonControl2Ex().
      s3-kerberos: add configure checks for krb5_get_creds_X api.
      s3-kerberos: add smb_krb5_parse_name_flags().
      s3-kerberos: remove duplicate prototype.
      s3-kerberos: add smb_krb5_get_{creds,credentials} incl. support for S4U2SELF impersonation.
      s3-kerberos: fix some build warnings when building against heimdal.
      s3-kerberos: add smb_krb5_get_tkt_from_creds().
      s3-kerberos: add impersonate_principal for kerberos_return_pac_X calls.
      s3-net: allow to call "net ads kerberos pac <impersonation principal> -P".
      s3-net: better use memory credential cache in net_ads_kerberos_pac().
      s3-kerberos: modify cli_krb5_get_ticket to take a new impersonate_princ_s arg.
      s3-kerberos: use smb_krb5_get_credentials in ads_krb5_mk_req.
      s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket().
      Revert "s3-kerberos: add smb_krb5_parse_name_flags()."
      s3-netlogon: implement _netr_GetDcName and _netr_GetAnyDcName.
      s3-kerberos: let smb_krb5_get_tkt_from_creds() compile with older heimdal libs.
      s3-param: fix set_inherit_acls().
      s4-smbtorture: re-arrange netlogon LogonControl test.
      s3-netlogon: enable RPC-NETLOGON-ADMIN test against s3.
      s3-rpc_client: make sure cli_rpc_pipe_open_schannel() does not always return NT_STATUS_OK.
      s3-kerberos: add smb_krb5_principal_get_realm().
      cifs.upcall: Fix Bug #6868: support building with Heimdal we well as with MIT.
      s3-kerberos: avoid using ERROR_TABLE_BASE_krb5 without checking.
      s3-kerberos: remove smb_krb5_get_tkt_from_creds().
      s3-rpcclient: use the parsed binding string flags for auth choice.
      s3-build: make sure to remove libds and client object files on make clean.
      s3-build: really fix build of winbind_krb5_locator.
      s3-build: delete more object files for "make clean".
      spoolss: fix spoolss_EnumPrinterKey IDL.
      s3-spoolss: fix spoolss_EnumPrinterKey client and server code.
      s4-smbtorture: add tests for spoolss_EnumPrinterKey to RPC-SPOOLSS-PRINTER.
      s3-printing: use spoolss types and structs while adding drivers.
      s3-printing: use spoolss types and structs while getting and deleting drivers.
      s3-printing: remove unused NT_PRINTER_DRIVER_INFO_LEVEL structs.
      s3-spoolss: move more defines out of nt_printing.h to spoolss.idl where they belong.
      s3-printing: remove duplicate code while cleaning up driver structs.
      s4-smbtorture: fix spoolss_EnumPrinterKey client in RPC-SPOOLSS-WIN.
      s3-spoolss: Fix GetPrinter level 101.
      docs: Fix Bug 6922: Add Registry patchfile for Win7 domain join.
      s3-registry: remove reg_pull_multi_sz().
      s3-registry: use push_reg_multi_sz() in registry_push_value().
      s3-spoolss: fixes for _spoolss_EnumPrinterKey client and server.
      s3-spoolss: re-arrange driver info level fillup functions.
      cifs.upcall: 2nd part of fix for Bug #6868: support building with Heimdal we well as with MIT.
      nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.
      s3-kerberos: add check for prerequisite krb5/krb5.h header while checking for krb5/locate_plugin.h.
      s3-registry: fix REG_MULTI_SZ handling in registry_push_value.

Inra (1):
      s4: Fix "Small memory leak after calling several times lp_update"

Jan Engelhardt (1):
      s3/smbldap: add option to disable following LDAP refs

Jeff Layton (5):
      cifs.upcall: do a brute-force search for KRB5 credcache
      mount.cifs: print output to stderr
      mount.cifs: print output to stderr
      mount.cifs: check access of credential files before opening
      mount.cifs: don't leak passwords with verbose option

Jelmer Vernooij (31):
      Mark test_security_descriptor_add_neg as known failing (for now).
      ldb: Support running testsuite without installing first.
      ldb: Remove references to operational module init function.
      repl_meta_data: Fix include path when building with standalone ldb.
      pidl: Remove unnecessary _GNU_SOURCE define.
      Fix string-wchar-fixed-array-01 test (when libndr is available).
      Fix string-wchar-fixed-array-02 test (when libndr is available).
      Fix string-wchar-fixed-array-03 test (when libndr is available).
      pyldb: Don't segfault when invalid type is specified to Dn.get().
      provision: Avoid linking in multiple copies of security python module.
      Check for PyString_FromString being NULL.
      Revert "s4:python  fixed subunit tests of dcerpc"
      PEP8
      Add init file for DCE/RPC tests.
      pidl(s4.python): Fix arguments to PyCObject_FromVoidPtr for string_array's.
      samba.tests.provision: Remove broken become_dc test.
      s4/make: Remove object files in ../libds as part of "make clean".
      ldb: Check for talloc using pkg-config before checking manually, so we
      registry: Fix warning freeing talloc pointer with multiple parents.
      pygensec: Add initial work on a gensec Python module.
      gensec: Avoid exposing lp_ctx on the API level.
      libutil: Add separate utility code for dealing with settings as a
      util/parmlist: Add some more comments.
      parmlist: Add basic tests for test_get_int().
      selftest: Prefer system tap2subunit if available.
      librpc: Fix path to ndr_standard pc file.
      rpc_server: Fix warnings.
      parmlist: Add more tests.
      make: Use $(base_srcdirs) in 'make clean' rather than keeping a separate
      Move samba-specific variable to s4 Makefile.
      pidl: Avoid using talloc_free as function pointer, since it may be a

Jeremy Allison (110):
      Another part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Hopefully last part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Fix bug 6673 - smbpasswd does not work with "unix password sync = yes".
      Add read() to socketwrapper. Metze please check.
      Fix bug 6673 - smbpasswd does not work with "unix password sync = yes".
      Add read() to socketwrapper. Metze please check.
      Fix compile in a usually non-selected define.
      Fix compile in a usually non-selected define.
      Fix bug 6726 - Filename length overwrites oplock request field in cli_nt_create().
      Fix bug 6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.
      Torture test for bug 6529 - Offline files conflict with Vista and Office 2003.
      Remove ununsed variable warning.
      We now pass the Microsoft SMB2 fileio test with EA's and streams...
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      Fix the problem with pidl generating invalid C for enums. According
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Check in modified generated files for systems where pidl can't run.
      Ensure we enclose the enum values in brackets to make the cast work.
      Re-generated idl files with () for enum values.
      Revert 918b5a7e057bd91289ec06b3ef8d95da43a50ede. This code
      Revert b39c390280d1f268e2550c731057aec550a3f086 - casts should not
      Remove the const from the str_list_XXX functions that
      Reduce debug log level from 0 -> 7 on non-critical message.
      Fix vfs module sample for new interface.
      Rewrite vfs_transparent example for the new VFS changes.
      Remove unused static fn.
      Update the advice for the new VFS system.
      Fix the opaque sample module for the new VFS interface.
      Second part of fix for bug #6235 - domain enumeration breaks if master browser has space in name.
      Don't defer a talloc_move'd pointer.
      Fix for CVE-2009-2906.
      Fix for CVE-2009-2813.
      NULL is not a valid event context.
      Fix bug #6769 - symlink unlink does nothing.
      Fix more use of VFS_STAT when posix pathnames selected.
      Missed one VFS_STAT -> VFS_LSTAT
      Remove lots of duplicate code and move it into one
      Fix bug 6776 - Running overlapping Byte Lock test will core dump Samba daemon.
      Test creating and deleting a bad symlink using the POSIX calls. Ensure
      Correct fix for bug 6781 - Cannot rename subfolders in Explorer view with recent versions of Samba.
      Make the logic a lot clearer and fix the comment to match.
      Oops. Don't break the build..
      Exteded RAW-RENAME test to catch regressions in bug 6781.
      Cope with old CIFSFS clients that use SMBunlink to remove
      Catch one more erroneous use of errno.
      Remove use of "int ret" when we already have errcode.
      Final part of fix for bug 6793 - winbindd crash with "INTERNAL ERROR: Signal 6"
      Fix the build, missing ->.
      Fix valgrind memory leak in bug #6814 - Fixes for problems reported by valgrind
      Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. Caught by the torture tester. I love unit tests :-). Jeremy.
      Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code.
      Add comment explaining about symlink following & posix.
      Fix posix_unlink test. Was doing grep without quotes around the
      Fix the pam_smbpass.so build with the recent linker flag changes.
      Remove pythonmods from the build in source3, it doesn't build anyway
      Fix "make install" by removing all references to python. Not currently
      Add local (or NFS) lock test to smbtorture. Checks that local locks
      Fix comments on new test.
      Fix bug 6828 - infinite timeout occurs when byte lock held outside of samba
      Turn on LOCK9 test which will test for regressions in bug 6828.
      Fix bug 6829 - smbclient does not show special characters properly.
      Simplify the logic.
      Second part of the fix for bug 6828 - infinite timeout occurs when byte lock held outside of samba.
      Start fixing the RAW-STREAMS test - ensure that the xattr
      Fix bug 6867 - trans2findnext returns reply_nterror(req, ntstatus) In a directory with a lot of files.
      Convert from numbers to correct SMB_FIND_XX constant names.
      Fix more of the RAW-SEARCH test. Older info levels are
      requires_resume_key is a bool not int.
      Fix debug statements to use correct function name.
      Make samba3-idl to fix the build.
      Remove "Protocol" as an extern, and add accessor functions.
      Filter the returned DOS attributes by 0xFF for clients
      Fix debug comment (brain wasn't working...).
      Fix up some of the timing constants for DELAYWRITE. Add some extra tests up test_delayed_write_update6
      Get closer to an accurate model of Windows timestamp changes.
      Fix explicit set of write time on close.
      Simplify the logic - remove extraneous argument and calls to set_close_write_time().
      Remove the smbd:writetimeupdatedelay change Metze added. Metze please
      Revert commit "0551284dc08eb93ef7b2b2227a45e5ec21d482fb" - simplify
      Got the logic simplification worked out so we still pass
      Fix bug 6841 - "map acl inherit = yes" not working.
      Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Fix bug 6880 - cannot list workgroup servers
      Fix bug 6878 - Cannot change ACL's inherit flag.
      Second part of bugfix for 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Ensure every return path initializes presult as NULL.
      Fix bug 6891 - using windows explorer to change ownership on a folder fails with Bad File Descriptor.
      Ensure all callers to the rpc_client/cli_pipe functions correctly
      Revert "Ensure every return path initializes presult as NULL."
      Remove erroneous 'presult = NULL' changes. Now presult only gets set
      Remove unused variable warning.
      Revert "pidl: Fix selftest after s3 code changed"
      Don't overwrite a dynamic pointer with the address of a stack
      Remove "store create time" code, cause create time to be stored
      Start removing SMB_STRUCT_STAT variables except for
      Fix logic bug where high bits tests was being
      Fix bug #6898 - Samba duplicates file content on appending
      Proper fix for #6898 - Samba duplicates file content on appending. Pointed out by Volker.Restores the pathname handling for FILE_FLAG_POSIX_SEMANTICS but still prevents the O_APPEND problems. Jeremy.
      Remove unused code.
      Restore NtCreateX case handling with FILE_FLAG_POSIX_SEMANTICS to the way
      Fix make test. Only do POSIX case conversion if FILE_FLAG_POSIX_SEMANTICS set. Doh !
      Allow us to pass RAW-CHKPATH with FILE_FLAG_POSIX_SEMANTICS set or with
      Remove call into reduce_name if case sensitive. This allows us to pass
      Fix crash due to uninitialized pointer (not a problem in 3.4.x or below).
      Fix bug 6892 - When a chown operation is issued via Windows Explorer, all ACLS are wiped out.
      Add RAW-CHKPATH test with case-sensitive share.
      Make us pass RAW-CHKPATH with a case sensitive share.
      Fix warnings with talloc_asprintf.

Jim McDonough (1):
      s3: Fix incorrect rc check of nscd_flush_cache.

John H Terpstra (3):
      OPC oota edits
      Bug fix thanks to vjbangis viray
      Patches to fix typos thanks to OPC oota.

Kai Blin (1):
      ntlm_auth: use data_blob_talloc() to allocate session key

Kamen Mazdrashki (25):
      tort: Implement 'setup' and 'teardown' for DRSUAPI test cases.
      tort: Helper function to get DC info for testing
      tort: DsCrackNames - propagate torture context to all tests.
      tort: RPC-CRACKNAMES test case refactored
      s4/tort: CrackNames test update to work against W2K3.
      s4/tort: Make common setup/teardown drsuapi test funcs really common
      s4/tort: CRACKNAMES tests to use private structure for testing.
      s4/tort: Propagate torture_context and use torture_comment
      s4/tort: assert macro for drsuapi dcerpc call
      s4/tort: code clean up using torture_drsuapi_assert_call() macro
      s4/tort: RPC-DRSUAPI test case refactored to match torture architecture
      w32err: WERR_CLASS_NOT_REGISTERED updated
      w32err: NERR_ codes grouped together
      w32err: Sorting error codes in ascending order
      w32err: Re-define errors with numeric values
      w32err: Set hex format values for all errors
      w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND
      w32err: Importing auto-generated Win32 errors and descriptions
      w32err: WERR_GROUP_NOT_FOUND renamed to WERR_GROUPNOTFOUND
      w32err: WERR_USER_EXISTS replace with WERR_USEREXISTS name
      w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUND
      w32err: FRS_ group of errors replaced with numeric values
      w32err: WERR_DOMAIN_CONTROLLER_NOT_FOUND error value fixed
      util: str_list_unique_2() test implementation
      util: str_list_unique() bugfix

Karolin Seeger (30):
      s3/docs: Raise version number.
      s3/VERSION: Raise version up to 3.5.0.
      Merge commit 'origin/v3-5-test' into v3-5-test
      s3/docs: Set correct version number for manpages.
      WHATSNEW: Update WHATSNEW.
      s3/proto.h: Add lp_ldap_ref_follow prototype.
      WHATSNEW: Update changes.
      s3/docs: Add missing meta data to man ldbrename.
      s3:packaging: Fix building RHEL packages.
      Fix typo.
      s4:test: Fix typo.
      s3:docs: fake dir create times is a global parameter.
      WHATSNEW: Update release notes.
      s3:docs: Public is not a synonym for access based shareenum.
      s3: Rename new parameter "ldap ref follow" to "ldap follow referral".
      WHATSNEW: Update changes.
      s3/docs: Document new pdbedit -K option.
      s3/docs: Remove reference to nonexistent file.
      s3/docs: Fix typo.
      WHATSNEW: Update release notes.
      WHATSNEW: Mention the new "ctdb timeout" parameter.
      s3/configure: Disable the automatic merged build.
      s3/docs: Document "enable spoolss".
      s3/docs: Add "max protocol = smb2" to man smb.conf.
      WHATSNEW: Start with the major changes section.
      WHATSNEW: Start with the commit highlights.
      WHATSNEW: Remove rpcclient subcommands.
      create-tarball: Make it more comfortable to use the --copy-docs option.
      WHATSNEW: Prepare 3.5.0pre1 release notes.
      VERSION: Set version to 3.5.0pre1.

Kouhei Sutou (1):
      spnego: Support ASN.1 BIT STRING and use it in SPNEGO.

Lars Müller (2):
      Conditional install of the cifs.upcall man page
      Adjust regex to match variable names including underscores

Marc Aurele La France (1):
      Fix bug 6707 - 3.4.1 segfault in parsing configs.

Matt Kraai (6):
      Ignore source4/dsdb/kcc/kcc_service_proto.h.
      Port the Samba 4 shm_setup to QNX.
      Port the Samba 3 shm_setup to QNX.
      Prepend "$libreplacedir/" to all objects in LIBREPLACEOBJ
      Use the method used by build_env.sh to discover the user name.
      README.Coding: Fix typos.

Matthias Dieter Wallnöfer (79):
      s4:dsdb/common/util - Indentation fixes
      s4:dsdb/common/util.c - Copy parameters to prevent segfaults
      s4:ldb_errors - add spaces
      s4:pwsettings - Introduce the LDB modify flags in the right way
      s4: Fix typo
      s4:"linked attributes" modules - correct the comments
      s4:torture - Fix uninitialized variable
      s4:simple_ldap_map - Enhance it for supporting "primaryGroupID" in the right way
      s4:provision - Change the "provision_users.ldif" file to support the "samldb" changes
      s4:provision - Add a new delete function only for users and computers
      s4:samldb - Major rework
      s4:samr - Fix up the SAMR server to support the primary group of a user in the right way
      s4:sam - Implement also here the right primary group behaviour
      s4:provision - Change the module order to match Windows Server
      s4:ldap.py - Adds a test for the primary group behaviour
      s4:subtree delete module - Cosmetic adaptions
      s4:Foreign security principals - Fix them up
      s4:samldb - Fix typo
      s4:simple_ldap_map - "primaryGroupId"
      s4:LogonGetDomainInfo - add a basic check for the hostname
      s4: Let the "setpassword" script finally use the "samdb_set_password" routine
      s4:tests/iconv - Fix a warning
      s4:templates - Remove the latest relics (in "dcesrv_lsa_CreateSecret")
      s4:provision - Cosmetic: Indent the parameters better
      s4:setpassword script - Passwords set by this script are set by the administrator not the user
      Revert "s4: Let the "setpassword" script finally use the "samdb_set_password" routine"
      s4:netlogon - Put the "supported encryption types" more back in the "LogonGetDomainInfo" call
      util_strlist: Add some more "const"s
      util_strlist: Add some more "const"s - small correction
      netlogon.idl: indent correctly
      s4:ldb_map_outbound - fix memory leak
      netlogon.idl - rerun "make idl"
      s4:group policies - add the domain controller group policy
      s4:group policies - upcase directory names of default group policies
      s4:group policies - the default group policy objects are all system-critical
      util_smb: For some (unknown) reason the previous patch changed the permissions - Reset them
      libds/common/flags: various
      s4/python: flags
      s4/domain behaviour flags: Fix them up in various locations
      s4:provision - Some rework
      s4:libnet_become_dc - Fix some uninitialised variables
      s4:descriptor - cosmetic
      s4:descriptor module - Revert and const fixups
      s4:provision - Some rework (continuation)
      s4:provision - Bump down the domain and forest level to Windows 2000
      s4:pwsettings - Simplify the error handling a bit
      s4:domainlevel - Add a script which allows raising the domain/forest level
      s4:domainlevel - fix indentations
      s4:minschema/fullschema - add correct header comments
      s4:samdb.py - Unification of the interfaces
      s4:domainlevel/pwsettings - Remove unused import
      s4:various scripts under "setup" - Unification
      s4:scripts - Cleans also the rest under the "setup" directory up
      s4/provision_configuration - re-add the "sPNMappings"
      s4:provision_configuration - "sPNMappings": "http" missed on regeneration
      s4:samdb.py - further rework
      s4:provision_basedn_modify - fix the "auditPolicy" attribute
      s4:domainlevel - further improvements
      s4:provision_configuration - fix "sPNMappings"
      s4:ldb_parse - Fix the type of an array entry
      s4:domainlevel - fixed another error
      s4:server.c - add linespace (only cosmetic)
      s4:dsdb/common/util - Check for the right forest/domain function level
      blackbox:test_kinit - Remove the "-H" (hive) parameter
      s4:sec_descriptor - fix constant
      s4:samba3sam.py test - remove the primary group ID attribute here
      s4:python tools - try to fix some test problems
      Merge branch 'master' of git://git.samba.org/samba
      Revert "blackbox:test_kinit - Remove the "-H" (hive) parameter"
      s4:scripts - Reintroduce "-H" parameter
      s4:libnet_become_dc - bump down the level requested by abartlet
      s4:samdb/tools - That should fix now the last failures
      s4:provision - Fix up ProvisioningError class as suggested by Jelmer
      s3:vfs_default - correct function parameters
      s3:util_str "str_list_make_v3" - introduce also here the "const" result
      s3: Fix up various string "const" warnings
      s3:smbd/password - move list pointers into blocks
      s4:auth/gensec/schannel - fix a const warning
      s4:LDIFs - enhance the section comments

Matthieu Patou (8):
      Return a correct value for Supported Encryption Type
      s4: Pass WINBINDD_SOCKET_DIR var in order to overide the location of the Winbind socket
      s4: Fix parsing of CSDVersion: treat this field as an string null terminated.
      s4:sites & services - Adds Intersite transport containers
      s4: Script to build or rebuild extend DN attributes
      pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
      python: create a script for reorgnizing an LDB file.
      pythonbindings: allow add() to have an array of controls as second parameter

Michael Adam (97):
      tevent: add scripts to extract library symbols (exports file) from headers
      tevent: add script to extract signatures from header files.
      tevent: add script/abi_checks.sh. check for abi changes without gcc magic.
      tevent: move the original abi_checks script to script/abi_checks_gcc.sh
      tevent: add a make target "make abi_checks"
      tevent: remove filese generated by "make abi_checks" in "make clean".
      tevent: add abi_checks to "make test"
      tevent:mksyms: allow double pointer return value of functions.
      tevent:mksyms: allow characters after closing functions parenthesis.
      tevent:mksigs: ignore struct forward declarations.
      tevent:mksigs: correctly ignode multiline function typedefs
      tevent:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tevent:mksigs: normalize bool -> _Bool
      tevent:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:exports: add _tevent_req_cancel and tevent_req_set_cancel_fn.
      tevent:signatures: add _tevent_req_cancel and tevent_req_set_cancel_fn
      tdb:mksyms: allow double pointer return value of functions.
      tdb:mksyms: allow characters after closing functions parenthesis.
      tdb:mksigs: ignore struct forward declarations.
      tdb:mksigs: correctly ignode multiline function typedefs
      tdb:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tdb:mksigs: normalize bool -> _Bool
      tdb:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      talloc:mksigs: ignore struct forward declarations.
      talloc:mksigs: correctly ignode multiline function typedefs
      talloc:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      talloc:mksigs: normalize bool -> _Bool
      talloc:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:mksyms: fix spelling...
      s3:mksyms: fix spelling...
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      s3:dbwrap_ctdb: set dmaster in ctdb_transaction_store() also when updating an existing record
      dsdb: the samba3 ldap schema has no sambaAccountPolicy (any more at least)
      examples/LDAP: remove sambaAccountPolicy from the IBM-DS schema.
      tdb:tdbtool: add the "speed" command to the help text.
      tdb:tdbtool: add transaction_start/_commit/_cancel commands.
      tdb:tdbtool: fix indentation.
      build: add datadir to "make showlayout"
      build: add switch "--with-codepagedir=DIR" to configure.
      build: use AS_HELP_STRING() for --with-localedir
      s3: pdbedit: add option --kickoff-time/-K to set the user's kickoff time
      s3:dbwrap_ctdb: reformat a comment slightly to enhance clearness.
      s3:dbrwap_ctdb: add a function db_ctdb_ltdb_store()
      s3:dbwrap_ctdb: add a function db_ctdb_ltdb_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch_start
      s3:dbwrap_ctdb: fix a race in starting concurrent transactions on a single node
      s3:dbwrap_ctdb: add new db_ctdb_transaction_active() that calls CTDB_CONTROL_TRANS2_COMMIT
      s3:configure: add a check for the new CTDB_CONTROL_TRANS2_ACTIVE
      s3:dbwrap_ctdb: fix race condition with concurrent transactions on the same node.
      s3:dbwrap_ctdb: split combined check in two and add descriptive debug
      s3:dbwrap_ctdb: add debug message to transaction_fetch_start()
      s3:registry: add safety check for return value of tdb_unpack to regdb_fetch_keys_internal()
      s3:registry: add an extra check for dsize==0 to regdb_fetch_keys_internal()
      s3:vfs_fs_capabilities: fix a debug message
      s3:smbd: make idmap cache persistent for "ldapsam:trusted".
      s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()
      packaging(RHEL-CTDB): The former release number has basically moved into VERSION
      packaging(RHEL-CTDB): extend makespec.sh to extract VENDOR_PATCH from version.h
      packaging(RHEL-CTDB): Build winbind-32bit package in the 64bit build
      packaging(RHEL-CTDB): makerpms.sh: build winbind-32bit libs in the 64bit build
      packaging(RHEL-CTDB): makeversion.sh: v3-4-test uses source3 instead of source
      packaging(RHEL-CTDB):makespec.sh: fix detection of version
      packaging(RHEL-CTDB):makerpms.sh: replace source/ by source3/
      packaging(RHEL-CTDB): don't "make proto" any more.
      packaging(RHEL-CTDB): don't pass CFLAGS to make.
      packaging(RHEL-CTDB): fix location of nsswitch/ directory for install
      packaging(RHEL-CTDB): add new binary ldbrename to the common rpm
      packaging(RHEL-CTDB): add new binary sharesec to the client package.
      packaging(RHEL-CTDB): add new pam_winbind.mo to the common package
      packaging(RHEL-CTDB): also pack libwbcient in winbind-32bit package
      packaging(RHEL-CTDB): disable the merged build.
      packaging(RHEL-CTDB): pam_winbindd man page has moved from section 7 to 8
      packaging(RHEL-CTDB): package the manpage of "sharesec"
      packaging(RHEL-CTDB): package the manpage of "ldbrename"
      packaging(RHEL-CTDB): package the manpage of the winbind_krb5_locator plugin
      packaging(RHEL-CTDB): package the winbind_krb5_locator.so plugin
      packaging(RHEL-CTDB): move the idmap and nss_info modules to the common package
      packaging(RHEL-CTDB): fix packaging of pam_winbind.mo file
      packaging(RHEL-CTDB): enable parallel build
      packaging(RHEL-CTDB): add the current githash to the rpm release number by default
      s3:pdb_default_uid_to_sid: fix some debug statements.
      s3:passdb: remove the uid_to_rid method - we only need uid_to_sid
      s3:passdb: bump interface VERSION 18->19 (removed uid_to_rid)
      s3:is_trusted_domain: shortcut if domain name is NULL or empty
      s3:is_trusted_domain: shortcut if domain name == global_sam_name
      s3:fix a comment typo
      s3:load_interfaces(): use function gfree_interfaces() that we have.
      s3: shortcut uid_to_sid when "ldapsam:trusted = yes"
      s3:pdb_ldap: fix a comment typo
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_alloc_init
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_db_init
      s3:fix endianness bug in dbwrap_change_uint32_atomic() (bug #6901)
      s3:fix endianness bug in dbwrap_change_int32_atomic() (bug #6901)

Michael Ströder (1):
      s4: Exceptions in "provision.py"

Nadezhda Ivanova (13):
      Added "admin_session" method.
      Owner and group defaulting.
      security:idl Generated files
      Fixed a difference in domain sid type when SID is provided by user.
      Disable descriptor module unless enabled in smb.conf
      Initial implementation of security descriptor creation in DS
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Initial Implementation of the DS objects access checks.
      Merge branch 'master' of git://git.samba.org/samba
      s4:dsdb Fix of double addition of SD-s
      Fixed a dereferenced null pointer.
      Merge branch 'master' of git://git.samba.org/samba

OPC oota (1):
      s3:docs: Fix a typo

Olaf Flebbe (3):
      allow for outstanding_aio_calls to be decremented
      s3/loadparm: Fix severe HPUX compiler issue.
      correctly handle aio_error() and errno

Rusty Russell (7):
      Tell newbie devs about ./configure.developer
      lib/tevent: a cleaner fix for be4ac227842530d484659f2db683453366326d8b segv
      lib/tdb: TDB_TRACE support (for developers)
      lib/tdb: wean off TDB_ERRCODE.
      lib/tdb: add -t (always use transactions) option to tdbtorture
      lib/tdb: add tdb_check()
      lib/tdb: make tdbtool use tdb_check() for "check" command

SATOH Fumiyasu (1):
      Fix bug 6572 - libsmbclient: unable to access 'msdfs proxy' share.

Simo Sorce (9):
      Save and report the correct errno value.
      Check we read off the compelte event from inotify
      Save and report the correct errno value.
      Check we read off the compelte event from inotify
      Add release script for tevent
      Fixing timeval calculation
      Fix builds with external talloc
      Fix builds with external tdb
      Fix map readonly in smb.conf, it is a single word

Stefan (metze) Metzmacher (1):
      Add in Metze's new code to ndr encode the user.DOSATTRIB

Stefan Metzmacher (56):
      s4: disable source4 directory for the 3.5.x releases
      s3:configure: turn off the merged build by default for the 3.5.x releases
      tevent: change version to 0.9.8 after some critical bugs have been fixed
      s4:configure: require tevent >= 0.9.8
      lib/tdr: fix the build with --enable-automatic-dependencies
      s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()
      s4:drsuapi: add an incomplete DsAddEntry implementation
      s3:drsuapi: add a simple DsRemoveDSServer() implementation
      s4:repl_meta_data: remove unused code
      socket_wrapper: swrap_read() should use SWRAP_RECV* for swrap_dump_packet()
      socket_wrapper: swrap_read() should use SWRAP_RECV* for swrap_dump_packet()
      s4:repl_meta_data: increment the attribute version with each change
      s4:heimdal_build: fix the build with --enable-automatic-dependencies
      s4:heimdal_build: fix one more problem with automatic dependecies
      lib/crypto: include aes.h into crypto.h
      libcli/auth: rewrite schannel sign/seal code to be more generic
      s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred
      s4:torture: don't use 'pipe' as variable name it's a system call
      named_pipe_auth.idl: add infrastructure to pass delegated credentials
      librpc: rerun 'make idl'
      s4:service_named_pipe: accept delegated credentials
      libcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe
      s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it
      s4:torture: the spoolss notify test should listen on the ncacn_np endpoint
      s4:ntvfs_ipc: add real named pipe support
      s4:rpc_server: remove some now unused code
      drsblobs.idl: add decoding for repsFromTo2
      rerun: make idl
      drsblobs.idl: fix repsFromTo2 blob size calculation
      librpc: rerun 'make idl'
      s4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7
      s4:build: require ldb 0.9.7
      dsdb/samdb: add resolve_oids module
      s4:provision: add the 'resolve_oids' on the top of the module stack
      blackbox/test_ldb.sh: test searching using OIDs instead of names for attributes and classes
      s4:dsdb/resolve_oids: check return values in recursion
      s4:dsdb/resolve_oids: add fast pathes for the common operations without oids
      tevent: make sure we don't set errno within the signal handler function.
      s3:lib/select: don't overwrite errno in the signal handler
      async_sock: return -1/EPIPE if we're getting an end of file on read.
      s3:winbindd: avoid writing to a closed connection and generate SIGPIPE
      s3:secrets_schannel: revert to using version 1
      Revert "r20074: this values seem to be typos in drsuapi"
      s3:rpc_server: we need to make a copy of my_name in serverinfo_to_SamInfo_base()
      Revert "s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np"
      s3:rpc_client: don't randomly fragment rpc pdu's in developer mode
      s4:schannel: fix some compiler warnings
      s3:winbindd_cm: don't invalidate the whole connection when just samr gave ACCCESS_DENIED
      tdb: rename 'struct list_struct' into 'struct tdb_record'
      s3:configure: only check for gpfs_gpl.h
      tsocket: remove prototype of non-existing tsocket_address_inet_set_broadcast()
      tsocket_bsd: return -1 and set errno to ENAMETOOLONG if the unix path is too long
      tsocket: rewrite tsocket_guide.txt to reflect the current APIs
      pidl:NDR/Parser: $size can be 'foo / 2' so we need to add '(' and ')'
      pidl:Samba3/ClientNDR: $size can be 'foo / 2' so we need to add '(' and ')'
      librpc: rerun "make idl"

Steven Danneman (9):
      lib/util: add unique string generator helper function
      s4/torture: add new torture_assert_*_todo() macros
      s4/torture/smb2: Fix several small bugs and style issues in SMB2 dir tests
      s4/torture/smb2: removed SMB2-FIND test
      s3 onefs: Fix a race condition exists in onefs_open.c between multiple opens to the same file.
      s3 onefs: Fix 1 second share mode delay handling
      s4/torture: Allow receiving of oplock break requests in any order
      s4/torture: fix RAW-OPLOCK-STREAM1 test after commit a11bb14
      s4/torture: Add server target of OneFS

Tim Prouty (2):
      s3: Add more helpful debugging to some of the streams code
      s4 torture: Fix RAW-STREAMS to request more specific permissions

Volker Lendecke (115):
      s3:libsmb: Convert (state->received) to (state->received != 0)
      s3:winbind: Make the pam_auth subfunctions static
      s3:winbind: Remove pointless <cond> ? true : false;
      s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpy
      s3:smbd: Add the ntstatus to the smb_panic in share_mode_lock_destructor
      s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new API
      s3:winbind: Convert WINBINDD_SET_MAPPING to the new API
      s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new API
      s3:winbind: Convert WINBINDD_SET_HWM to the new API
      s3:smbd: Add the ntstatus to the smb_panic in share_mode_lock_destructor
      s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new API
      s3:winbind: Convert WINBINDD_SET_MAPPING to the new API
      s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new API
      s3:winbind: Convert WINBINDD_SET_HWM to the new API
      s3:libsmb: Convert (state->received) to (state->received != 0)
      s3:winbind: Make the pam_auth subfunctions static
      s3:winbind: Remove pointless <cond> ? true : false;
      s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpy
      s3:winbind: Fix Coverity ID 940: Resource Leak
      s3:smbd: Fix Coverity ID 937, REVERSE_INULL
      s3:winbind: Fix Coverity ID 933: FORWARD_NULL
      s3:smbd: Add a "hidden" parameter "share:fake_fscaps"
      s3:docs: Add info about how to obtain cifs module in cifs mount helper manpage
      s3:smbd: Add a "hidden" parameter "share:fake_fscaps"
      s3:docs: Add info about how to obtain cifs module in cifs mount helper manpage
      s3:vfs: Fix the build of vfs_tsmsm after the VFS rewrite
      s3:libsmb: Fix bug 6606 -- short reads in smbclient were not handled
      s3: Test short reads in the build farm
      s3:vfs_modules: Fix Coverity ID 946: OVERRUN_STATIC
      s3:vfs_catia: Use talloc_zero for simplification
      s3:vfs_catia: Make some fns static
      Second part of bug fix for 6606.
      s3: Add some debugs to streams_xattr
      s3: Fix reading beyond the end of a named stream in xattr_streams
      s3:winbind: Fix some enum type mismatches found by the Solaris compiler
      s3:smbd: Fix an inappropriate pointer return in a bool fn
      s3:smbd: Attempt to fix the build on HP/UX
      s3:smbstatus: Fix some nonempty blank lines
      s3:smbstatus: Fix bug 6703, allow smbstatus as non-root
      s3: Fix Coverity ID 581 -- NEGATIVE_RETURNS
      s3:winbind: Fix an uninitialized variable
      s3:gencache: Add a "was_expired" argument to gencache_get_data_blob
      s3:gencache: Remove some over-paranoid locking
      s3:gencache: Make gencache_del() return success for expired entries
      s3: Make the vfs_gpfs compile at least
      s3: Remove an unused variable
      s3: Forgot to check in one build failure for vfs_gpfs.c
      s3:winbind: Make append_data publically available as append_auth_data
      s3:winbind: Sanitize the args for find_auth_domain: It only needs the flags
      s3:winbind: Make "check_request_flags" publically available
      s3:winbind: Make check_info3_in_group, sanitize its memory handling
      s3:gencache: Add my copyright
      s3:winbind: remove a pointless initialization
      s3: Remove the lua interpreter again
      s3: Document the "share:fake_fscaps" parameter, fix bug 6765
      s3: Fix nonempty blank lines
      s3: Remove a scary error message -- talloc_move can not fail :-)
      s3: Fix shadow copy display on Windows 7
      s3: Fix a memleak reported by dmarkey
      s3:net: Fix a segfault in "net rpc trustdom list" for overlong domain names
      s3: Fix some nonempty blank lines
      s3:rpc: Fix is_known_pipename for dynamically loaded pipes
      s3:libsmb: Add cli_notify
      s3:torture: Add a notify-bench test
      s3:winbind: Fix bug 6793 -- segfault in winbindd_pam_auth
      s3:winbind: Fix a double-free
      s3: Make "debug hires timestamp" default to true
      s3: Fix a 100% CPU loop when ctdbd dies during a traverse
      s3: Remove debug_ctx()
      s3: Add parameter "ctdb timeout"
      s3: Fix the talloc hierarchy in notify_remove_onelevel
      s3: Fix a crash in notify_remove_onelevel when "change notify = no"
      s3: get_pipe_name_from_iface -> get_pipe_name_from_syntax
      s3: Get rid of explicit pipe names
      s3: Get rid of a NULL terminator
      s3: Register the ndr_interfaces dynamically
      s3: Do the printing for DEBUGLEVEL>=10 centrally
      tdb: Fix a C++ warning
      s3: Do not directly reference the ndr_table_* in rpcclient
      s3: Do not reference ndr_table_<pipe> in the cli_ routines directly
      s3: Consolidate getting the name out of a pipes_struct
      s3: Do not reference the ndr_tables in the server calls directly
      s3: Do not reference ndr_table when calling rpc_srv_register
      s3: Make run_rpc_command take strings instead of a ndr_interface_table
      s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table
      Revert "s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table"
      Revert "s3: Make run_rpc_command take strings instead of a ndr_interface_table"
      Revert "s3: Do not reference ndr_table when calling rpc_srv_register"
      Revert "s3: Do not reference the ndr_tables in the server calls directly"
      Revert "s3: Consolidate getting the name out of a pipes_struct"
      Revert "s3: Do not reference ndr_table_<pipe> in the cli_ routines directly"
      Revert "s3: Do not directly reference the ndr_table_* in rpcclient"
      s3: Try to avoid dns searches with an empty site
      s3: Fix debug messages in check_reduced_name
      pidl: Fix selftest after s3 code changed
      s3: Convert cli_unix_extensions_version to async
      fix bogus "out of memory" winbind msg
      Fix large paged search
      s3: Convert libsmb/cli_message to the async API
      s3: Fix a memleak in sys_popen
      s3: Do not talloc in readdir
      s3: Replace some create_synthetic_smb_fname() calls
      s3: Do not kill the whole smb session if a machine pwchange failed
      s3: Factor timeval_string out of current_timestring()
      s3: Add some debugs to the winbind machine pwchange machinery
      s3: Re-check the timeout in machine_password_change_handler()
      s3: Protect against flooding the DC with pwchange requests
      s3: Avoid races to change the machine password in winbind
      s3: Cache brlock.tdb entries for the fast read&write strict locking code path
      s3: Remove a pointless memset
      s3: Tune if-conditions in a very hot codepath
      s3: Fix bug 6338 -- net rpc trustdom list always display "none"
      s3: Move a variable declaration to its only use
      s3-winbind: In _wbint_CheckMachineAccount, there is only one child domain ever
      s3: Always try SamLogonEx

Wilco Baan Hofman (1):
      regshell: Add support for 'cd ..' and cd relative to the root.

Zack Kirsch (1):
      s3 onefs: Add some debugging/asserts to give more info when there is bad deferred open state.

Zahari Zahariev (2):
      Basic tests for nTSceurityDescriptor both SDDL and BASE64 format
      Tests for descriptor inheritance

-----------------------------------------------------------------------


-- 
Samba Shared Repository


More information about the samba-cvs mailing list