[SCM] Samba Shared Repository - annotated tag release-4-0-0alpha9 created

Andrew Bartlett abartlet at samba.org
Mon Nov 30 22:08:27 MST 2009


The annotated tag, release-4-0-0alpha9 has been created
        at  299e55c88c857b3a08a7ba4e0efa7bf53337868d (tag)
   tagging  ca2c645156a288ca35c5120e95bb9a878a889848 (commit)
  replaces  tevent-0-9-8
 tagged by  Andrew Bartlett
        on  Tue Dec 1 16:04:01 2009 +1100

- Log -----------------------------------------------------------------
Samba4 alpha9 release tag
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQBLFKPHz4A8Wyi0NrsRAjVBAJsGLYaPpcWPncDw1TkYHQlHG2n3OACeNOFc
6gl5nUHQh0H5je0P//o9oTc=
=U5tq
-----END PGP SIGNATURE-----

Abhidnya Chirmule (1):
      To set file create/birth time in GPFS. Signed-off-by: Abhidnya Chirmule <achirmul at in.ibm.com>

Abhidnya P Chirmule (1):
      s3: Add access_mask to the flock VFS call

Anatoliy Atanasov (14):
      Fill the meta data vector in the responce struct.
      Fix up-to-dateness vector creation.
      Fix up-to-dateness vector creation.
      Add drs_security_level_check for dcesrv calls security checks
      Move replmd_drsuapi_DsReplicaCursor2_compare to a common place.
      Handle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c
      Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Add support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints
      Move the check above the talloc
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_CRITICAL_ONLY req in getncchanges
      idl: regenerate idl
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_SYNC_PACKET in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_ASYNC_REP in getncchanges
      s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_SPECIAL_SECRET_PROCESSING in getncchanges

Andrew Bartlett (210):
      s4:setup Add DisplaySpecifiers from Microsoft.
      s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etc
      s4:idl Add generated code for netlogon.idl changes
      s4:provision Don't reference provision_backend when using LDB
      libcli:drsuapi Add function to encrypt data for transport over DRSUAPI
      s4:provision Only delete SASL mappings with Fedora DS, not OpenLDAP
      s4:setup Updated Display Specifiers from Microsoft (with #s)
      s4:rpc_server netgotiate max xmit size with RPC client
      s4:kdc In the kpasswd server, don't use the client address in mk_priv
      s4:heimdal_build Love pointed me at the --one-code-file option to asn1_compile
      s4:heimdal_build Fix build breakages caused by asn1compile change
      s4:provision Prevent some invalid combinations of realm and domain
      libcli:nbt make the lmhosts parsing code and dependicies common
      s4:schema Add code to provide an index into the subClass tree
      libcli:nbt put util_net.c protos in new header file
      s4:utils Explian fix for testparm -v
      libcli:nbt move prototypes of lmhosts functions to libnbt.h
      s4:dsdb Print the partition we failed to suggest replication for
      s4:utils Remove typo...
      s4:provision split provision of DNS zone and self join keytab
      s4:ldb print out which LDB the transaction is still active on.
      s4:provision Use code to store domain join in 'net join' as well
      s4:py_security Add missing header
      s4:provision Make us Windows 2008 level by defualt again
      s4:provision Make our default salt match our server behaviour
      s4:kerberos Fix the salt to match Windows 2008.
      s4:dsdb Run the new 'descriptor' module by default.
      s4:ldb Add 'single-value' support to LDB.
      s4:ldif_handlers Fix memory leak in objectCategory LDIF handler
      s4:Ensure the selected RDN is the right one per the schema
      s4:ntvfs Don't attempt to follow NULL in unixuid_setup_security()
      s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks.
      s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA
      s4:ldb always talloc_free() the ldb_ldif_write context, even on success
      s4:ldb Remove LTDB_PACKING_FORMAT_NODN
      s4-ldb: merged with master
      s4:provision Ensure we add the schema with the 'relax' control
      s4:ldap_server Ensure we don't segfault when sent a NULL new RDN
      s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OID
      s4:dsdb Don't allow creating of new objects with an isDefunct schema class
      s4:dsdb rework instanceType module - put instanceType in provision
      s4:dsdb Fix crash from LDAP login of DOM\\
      s4:dsdb Pass down the exact error code on failure in repl_meta_data
      s4:dsdb Return correct error on invalid attribute
      s4:ldb Don't allow modifcation of distinguishedName
      s4:ldb Don't allow RDN to be modified with an LDB modify message
      s4:dsdb Add objectClass and RDN constraints to objectClass module
      s4:dsdb add systemPossibleInferiors to schema code
      s4:dsdb Use possibleInferiors to restrict creation of child objects
      s4:provision Remove unused parameters from provision scripts
      s4:param Remove duplicate argument to python provision
      s4:drs-development Scripts to assist testing of DRS replication with AD
      s4:provision Clarify that we set, rather than modify, objectGUID values
      s4:provision Remove all references to samba4LocalDomain
      s4:dsdb Add new functions to help modules do an ldb_search()
      s4:dsdb Search for the schema with dsdb_module_search(), in schema_fsmo
      s4:ldb Allow a module string of ""
      s4:ldb Reload the 'ltdb_cache' when @OPTIONS changes
      s4:dsdb Make dsdb_read_prefixes_from_ldb static
      s4:schema Add some error checking to the schema load
      Allow (and ignore) distinguishedName on special records
      s4:ldb Allow a NULL module list
      s4:heimdal A real fix for bug 6801
      Revert "s4:hdb-samba4 - Don't double-free "db""
      s4:dsdb Rework modules create new partitions at runtime
      s4:provision Set @OPTIONS in the provision_init.ldif
      s4:dsdb Set 'notification' after the success of a change.
      s4:dsdb Be strict in selecting on-disk names for partitions
      s4:dsdb Fix tests for samba3sam to pass after partitions module changes
      s4:dsdb Fix partition_create not to return early
      s4:dsdb Don't try and casefold DNs during startup for partition load
      s4:Handle reprovision with existing partitions
      s4:dsdb Split 'set per-partition metadata' into it's own function
      s4:provison Allow the NTDS guid on the command line (for testing)
      s4:provision Test ability to set GUIDs from provision command line
      s4:dsdb Reload partition metadata if the main db updates
      s4:dsdb Only reload partition metadata on search and transaction start
      s4:dsdb Load new partitions in a running LDB if metadata changes
      s4:ldb Add function to add controls to an LDB reply
      s4:dsdb In partitions module, tell the caller what partition was used.
      s4:repl Pass schema as argument to replmd_update_rpmd()
      s4:dsdb Use 'partition modified' information to update @REPLCHANGED
      s4:dsdb Remove workaround for two partition head records
      s4:dsdb Remove default instanceType from repl_meta_data
      s4:provision Use schema to casefold partitions on 'upgrade'.
      s4:dsdb Allow creation of new partitions
      s4:epmapper Create a proper talloc tree of endpoint floors
      librpc Make talloc tree in binding tower match the floors
      s4:samr Don't leak the whole user onto the long-term handle
      s4:ldb Add new function to create a cut down list of controls
      s4:dsdb Remove potentially confusing 'partition' control from result
      s4:rpc_server Ensure we talloc_free handles when we delete objects
      s4:ldb Put ltdb_private under the 'module'
      s4:dsdb talloc_steal the backend module to under the partition
      s4:ldb_map Fix use-after-free of memory in ldb_map
      s4:dsdb Make the 'relative path' code in partitions handle tdb://
      s4:dsdb Allow loading of old-style partition records
      s4:dsdb Add note explaining about the partition format upgrade
      s4:dsdb Add default modules list to samba3sam
      s4:dsdb Use the 'correct' case for the namingContext values in rootDSE
      s4:torture Silence const warning by use of data_blob_const()
      s4:dsdb Set partitions metadata as soon as it is set up.
      s4:dsdb Split schema loading and schema data management
      util:ldb Allow multiple entries to be added in one LDIF snippit
      s4:gensec Use an index on computerName in schannel.ldb
      s4:secrets Look for LDAP secret with a name that is indexed
      s4:setup Mark 'cn' in secrets as case insensitive
      s4:dsdb Do less allocation when searching for partitions modules
      s4:dsdb Remove unused variables
      s4:dsdb Add error string in 'no such object' because of 0 replies case
      s4:dsdb Fix samba3sam test again.
      s4:dsdb 'attrs' must be static (otherwise segv with async)
      s4:dsdb Remove partition_extended_schema_update_now
      s4:ldb Add additional tracing of the ldb API
      s4:dsdb Rework partitions module for better tracing
      s4:ldb Add detail to failures in the indexing code
      s4:ldb Remove debug traces duplicated by the new generic trace code
      s4:credentials Put the 'secrets.keytab' in the same directory as secrets.ldb
      lib/util Add rfc1738 escape/unescape code from Squid
      lib/util Use rfc1738.c from Squid for all our URL encode/decode needs.
      s4:dsdb Revert back to using DN:filename in the partitions record
      Remove special case logic in 'samdb_relative_path'.
      s4:provision Rework provision to always have a ProvisionBackend
      s4:provision Make 'linked_attributes' and 'dnsyntax_attributes' a property of the Schema
      s4:provision Move 'Schema' into it's own file
      s4:provision Fix samdb test with new provision code
      s4:provision Inline 'ldap_backend_shutdown' for clarity
      s4:provision Split ProvisionBackend out of the main provision script
      s4:provision Remove LDB backend files in provision
      s4:dsdb Fix up after the MAP_ constants became LDB_MAP_
      lib/util Fix comments in rfc1738.c.
      libcli/nbt Move more of lmhosts lookup into common code
      lib/util Split data_blob_hex_string() into upper and lower
      s4:ldb Add a helper function for 'canonicalise' both strings base compares
      s4:dsdb Add new dsdb_dn to handle DN+Binary and DN+String
      s4:ldb-samba Use new ldb_any_comparison helper function in ldb-samba
      s4:dsdb Use new dsdb_dn code in LDB modules and Samba4 schema
      s4:ldb Remove DN+Binary code from the core ldb_dn
      s4:dsdb Add extensive tests for the behaviour of dsdb_dn
      s4:ldb Add Well Known GUID (WKGUID) tests to ldap.py
      s4:dsdb Ensure we allow 'odd' lengths for DN+String
      s4:dsdb Cosmetic fixes found by metze in review of dsdb_dn changes
      s4:vampire Print error message when we fail on the CLDAP ping
      s4:dsdb/schema Simplify schema loading from ldb messages
      s4:dsdb/repl Split the 'convert' or 'commit' stages in the DRS import
      s4:provision Remove unused 'sambadn' parameter
      s4:provision Add C binding to get at the generate schema
      s4:Fix regression in dsdb_dn code - all parses of the DN would be rejected
      s4:dsdb Add expected value tests for most DRS syntax conversions
      s4:torture Convert RPC-DSSYNC test to use LDB rather than raw LDAP
      s4:ldb Change ldb_request_add_control to the normal 'for loop' pattern
      s4:ldb Don't segfault if we somehow get an unknown extended dn element
      s4:dsdb/schema Allow a schema set when bound against a remote LDAP server
      s4:ldb Allow ldb_msg_canonicalize to handle empty elements
      s4:torture Add const
      s4:torture/dsdb Add verification of the push-to-LDB functions in RPC-DSSYNC
      s4:torture Remove _drs_util_verify_attids() from RPC-DSSYNC
      s4:dsdb Improve debug message in extended_dn_out
      s4:torture Use (some) torture_assert() calls in RPC-DSSYNC test
      s4:dsdb/schema Add more unit tests for DN+Binary syntaxes
      s4:repl_meta_data Parse linked attributes with schema syntaxes
      s4:libcli/ldap Add 'relax' OID to known network representations
      s4:selftest Mark the RPC-DSSYNC test as knownfail for now
      s4:dsdb Make callbacks in extended_dn_out clearer to follow
      s4:heimdal: import lorikeet-heimdal-200909210500 (commit 290db8d23647a27c39b97c189a0b2ef6ec21ca69)
      s4:heimdal: import lorikeet-heimdal-200911122202 (commit 9291fd2d101f3eecec550178634faa94ead3e9a1)
      s4:heimdal Import generated files from heimdal tree
      s4:SAMLDB module - Add support for required and generated schema attributes
      s4:dsdb LDB attribute lists must always be a static const char **.
      s4:dsdb Add 'dsdb_flags' to dsdb_module_search() to enable often-used features
      s4:dsdb Break up 'parse a DN from DRSUAPI' into a subfunction
      s4:dsdb Use the new flags to dsdb_module_search in schema_load
      s4:dsdb Load objectGUID and extended DN defaultObjectCategory into the schema
      s4:provision Generate a random objectGUID for each schema record
      s4:dsdb Rework samdb code to use 'storage format' DNs for defaultObjectCategory
      s4:schema Add the GUID to each defaultObjectCategory when loading from LDIF
      s4:provision Split up reference creation, load schema earlier in the stack
      s4:dsdb With these workarounds, we now pass the RPC-DSSYNC test
      s4:heimdal: import lorikeet-heimdal-200911170333 (commit b532c294d974cead40a1183c71be644c6ccc2832)
      s4:provision Simplify the module list
      s4:dsdb Move module configuration from each ldb into samba_dsdb.c
      s4:provision Remove 'operational' from secrets.ldb module list
      s4:dsdb Add function to return the CN=Aggregate schema DN
      s4:dsdb Return the subSchemaSubEntry operational attribute on every object
      s4:dsdb Use new helper function to obtain CN=Aggregate schema DN in schema_data
      s4:ldap.py Add tests for subSchemaSubEntry
      s4:operational LDB module - Prevent the modification of operational attributes
      s4:provision Move secrets.ldb over to .c file module lists, like sam.ldb
      s4:provision Don't bother with a template for the LDAP backend startup script.
      s4:provision Move exceptions into a new file
      s4:dsdb Handle LDAP backends correctly with new samba_dsdb system
      heimdal Fix invalid format string
      s4: update valgrind suppressions for use on build farm
      s4:dsdb Make samba_dsdb easier to use in upgrades - assume default values
      The start of a WHATSNEW for Samba4 alpha9
      Fix path to upgradeprovision
      s4:provision Make setting the domain SID in the self join optional
      s4:ldb Provide bindings for ldb_transaction_prepare_commit()
      s4:upgradeprovision Rework script, and reset machine account pw
      s4:selftest Add tests for upgradeprovision
      s4:upgradeprovision Use mkdtemp to create unique tempoary directory names
      s4:upgradeprovision add 'exit $failed' to blackbox test
      s4:dsdb Don't segfault with ldb_transaction_prepare_commit() without begin()
      s4:upgradeprovision Rework update_machine_account_password() tranactions
      s4:WHATSNEW Nadezhda's acl module handles modifies
      s4:ldap.py Add test of namingContext behaviour after tridge found a bug
      s4:setup Adjust upgradeprovision blackbox test now we don't have --targetdir
      This is alpha9
      Improve upgrade instructions
      Fix build of Samba4 from tarball generated by mkrelease.sh

Andrew Klosterman (1):
      s3:smbd: Fix bug 6690, wrong error check

Andrew Kroeger (22):
      selftest: Account for 0-based months in date parsing and printing.
      util:tests: Correct time tests for negative UTC offsets.
      s4:setup: Change license headers to LDIF comments.
      s4:setup: Added script to parse Microsoft DisplaySpecifiers document.
      s4:setup: Use ms_display_specifiers script for provision.
      s4:setup: Updated comment to reflect new DisplaySpecifiers location.
      s4:setup: Remove display_specifiers.ldif.
      gitignore: Ignore additional auto-generated files.
      s4:pwsettings: Correct off by factor of 10 for ticks.
      s4:pwsettings: Added --quiet option.
      s4:pwsettings: Run all updates as a single modify() operation.
      s4:pwsettings: Don't assume a value for pwdProperties.
      s4:pwsettings: Added validation.
      s4:pwsettings: Add 'default' option for password complexity.
      s4:pwsettings: Show default values in help messages.
      testprogs:subunit.sh: Add function for expected failures.
      s4:pwsettings: Added blackbox tests.
      s4:srvsvc: Fix logic on error checking.
      s4:ldb_map: Don't free ares too early.
      s4:provision: Update schema version number to W2K8.
      s4:provision: Show domains and forests are W2K8 DC capable.
      s4:torture: data_blob_hex_string() output is now lowercase.

Andrew Tridgell (508):
      s4: the secrets.ldb module needs the loadparm opaque setup
      s4: fixed the secrets.ldb construction in libnet
      s4: bring nsupdate-gss into the s4 tree
      s4:nsupdate-gss allow forcing of the realm
      s4:setup_dns.sh fixed the update of the GUID CNAME
      s4: fixed some shadowed variable warnings
      s4: removed an unused variable
      s4: fixed a unsigned printf warnings
      s4: 'index' is a libc function
      s4/ldb: fixed spelling
      s4: implemented server side of DSUpdateRefs call
      s4: fixed updaterefs options bitmap
      s4: added the structure for repsTo
      s4: commit generated DRS changes
      s4/ldb: added --show-binary command line option
      s4/ldb: don't line wrap ldif when --show-binary is used
      s4/ldb: expose the ldb flags with ldb_get_flags()
      s4/ldb: added ldif handler for repsFrom/repsTo
      s4/ldb: allow printing ntSecurityDescriptor in full
      s4/ldb: allow prefixMap to be shown as NDR
      s4/ldb: support NDR printing for 2 more replication types
      s4: allow repl:RODC=true/false to set ourselves as a RODC
      s4: fixed format of repsTo in samdb
      s4/repl: added refresh of repsTo
      s4/repl: implement DsReplicaSync
      s4:drs split addentry and getncchanges into separate files
      s4:drs level_out is a pointer
      s4/drs: broke out the core of the getncchanges code
      s4:drs match the meta_data and attributes array
      s4/vampire: fixed i/j index mixup in vampire code
      s4/drs: when we don't find an attribute use zero values
      s4/drsuapi: tech the IDL about some more key attribute names
      s4/schema: don't crash if we don't have subClassOf
      s4/schema: teach the schema_syntax code how to encode/decode more attributes
      s4: regenerate drsuapi IDL
      s4/torture: don't mix declarations and code
      s4/provision: another fix for breakage from b1dabb1133
      s4: fix spelling
      s4/drs: correctly fill in the GUID of DRS objects
      s4/drs: changed the UpdateRefs server to use the dn instead of the GUID
      libcli: added a drsuapi attribute encryption function
      s4/repl: give a useful error message if we can't decode an object
      s4: kludge_acl needs to be above repl_meta_data
      s4/drs: enable attribute encryption
      s4/torture: fixed lots of crash bugs in the DRS tests
      s4/libcli: when we get a DNS lookup failure show the name
      s4/drs: parentGUID needs to be specififcally asked for
      s4/provision: add the nTDSDSA GUID based DNS entries and SPNs
      s4-drs: add the magic DRS SPNs on AddEntry
      s4-drs: actually call the new drsuapi_add_SPNs() code
      s4-provision: use DNS name, not domain name
      s4-ldb: don't remove a message element beyond the end of the array
      s4-repl: don't add the RDN if it is already there
      s4-repl: on every ldb modify we need to update replPropertyMetaData
      s4-idl: added the IDL for the DsReplica* calls
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      s4-idl: added the IDL for the DsReplica* calls
      s4-repl: don't update replPropertyMetaData for non-replicated attributes
      s4-kcc: add a very simple KCC
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: refresh the partitions on each cycle
      s4-provision: revert _gc_tcp priority
      s4-drs: fixed the ldap SPN in AddEntry
      s4-vampire: cope with no invocationID when vampiring the schema
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kcc: we should only add to the repsFrom if it doesn't already exist
      s4-repl: we should only update uSNChanged when replication data changes
      s4-repl: use common functions to simplify updaterefs.c
      s4-drs: fixed the cursor generation to always be filled in
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-samdb: internal s4 ldb modules should be GPL not LGPL
      s4-repl: don't be too eager to allocate new sequence numbers
      s4-drs: spelling fix, and simpler search expression
      s4-drs: return objects with uSN > highest_usn
      s4-drs: also fill in tmp_highest_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-ndr: fixed memory leaks in ndr_pull_*_blob()
      s4-repl: fixed memory leaks
      s4-drs: change debug level
      s4-samdb: make it possible to ask for the sequence number of a partition
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-scripts: allow setup_dns.sh to take a PRIVATEDIR
      Merge branch 'master' of /home/tridge/samba/git/combined
      ndr: added --ndr64 flag to ndrdump
      idl: added DsExecuteKCC IDL
      idl: rebuild drsuapi.idl
      idl: added DRS GetNCChanges level 10
      s4-repl: keep a @REPLCHANGED object on each partition
      s4-sam: allow a search to specify a partition
      s4-dsdb: added dsdb_load_partition_usn and dsdb_save_partition_usn
      s4-repl: use the new dsdb partition uSN helper fns
      s4-drs: fixed search expression
      s4-repl: added a preiodic notification check to the repl task
      s4-repl: fall back to repsFrom if repsTo not set
      s4-repl: fixed a memory error handling linked attributes
      s4-drs: allow replication of renames
      s4-repl: handle rename in repl_meta_data
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      Merge branch 'master' of /home/tridge/samba/git/combined
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-libnet: use updated dsdb commit function
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-repl: add a debug to make it easier to monitor replication
      talloc: when we enable NULL tracking, reparent the autofree context
      s4-ldb: cope better with corruption of tdb records
      s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
      s4-repl: make sure we marshal the replPropertyMetaData after the last change
      s4-drs: filter based on local_usn
      tdb: allow reads after prepare commit
      s4-repl: don't do double replication
      s4-ldb: expose ldb_transaction_prepare_commit() in ldb
      s4-ldb: ldap attribute names can contain a '.'
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
      s4-drs: lock down key DRS calls
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-rpc: added a module for forwarding RPC requests
      s4-repl: take advantage of async RPC forwarding
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      Merge branch 'master' of /home/tridge/samba/git/combined
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
      s4-repl: raise a debug level
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      idl: regenerate IDL for NDR64 changes
      Merge branch 'master' of /home/tridge/samba/git/combined
      libreplace: added likely()/unlikely() macros for gcc
      util: use likely/unlikely for NT_STATUS_* macros
      ndr: added support for NDR64
      s4-rpc: added NDR64 support
      s4-pidl: add support for NDR64
      idl: recompile our IDL
      ndr: split out ndr enum functions
      ndr: num_auths is an array size, thus a uint3264
      ndrdump: fixed help
      s4-sam: add a note about the solaris client
      s3-rpc: samba3 needs the DCERPC_NDR64 define
      talloc: don't crash if f is NULL in talloc_report_*
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-drs: cope with dupliate linked attributes
      Merge branch 'master' of /home/tridge/samba/git/combined
      s4-kdc: ignore unknown keytypes
      s4-server: kill main daemon if a task fails to initialise
      s4-pipes: convert pipe names to lowercase and validate
      s4-resolve: fixed a crash bug on timeout
      s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW
      pidl: update expected output for NDR64 changes
      s4-rpc: remove some unnecessary #include lines
      s4-rpc_server: removed remaining unnecessary #includes
      s4-testparm: fixed -v option
      s4-smbd: minimise includes in smbd/ and smb_server
      s4-scripts: make minimal_includes handle our -I overrides
      s4-smbd: removed unnecessary includes
      tdb: increase minor version
      more include minimisation
      s4-ldb: bump minimum version in ldb too
      s4-repl: need param.h for lp_parm_bool
      s4-ldb: display an error if we can't decode a NDR blob
      s4-drs: security checking on DRS needs to default to on
      s4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account
      talloc: fixed talloc_disable_null_tracking()
      s4-selftest: disable RPC-COUNTCALLS
      s4-selftest: disable RAP-SCAN test
      s4-dsdb: fixed a printf format warning
      s4-ldb: add support for extended DNs in the rootDSE
      s4-ldap: default edn type is 0
      s4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing
      s4-ldb: add --trace command line option to ldb tools
      s4-schema: don't trace the schema load (too verbose)
      s4-samdb: enable ldb tracing when log level >= 10
      s4-ldb: fixed O(n^2) string handling in ldif debug print
      s4-ldb: bit prettier output
      s4-ldb: don't show timestamps on every line of ldb traces
      s4-ldb: only show the outer level of ldb ops when tracing
      s4-rpc: remove two unused functions
      s4-rpcserver: run all RPC operations in a single task
      s4-rpcserver: added shared association groups
      s4-lsa: added support for QuerySecurity on LSA
      s4-rpcserver: added support for shared handles
      s4-torture: add some debug info to RPC-HANDLES
      s4-util: windows only accepts lowercase hex encodings for extended DNs
      s4-ldbmodules: allow instanceType to be specified by clients
      s4-ldb: when tracing, show ldb_set_debug messages
      s4-ldb: added a bunch more debug for DC join
      s4-ldb: fixed call argument order for ldb_dn_from_ldb_val
      s4-ldb: server side sort args are const char *
      s4-drsserver: sort by DN to give tree order
      s4-nbt: added NBT_SERVER_DNS_FOREST
      idl: fixed string termination for netlogon GetDomainInfo
      s4-cldap: return domainFunctionality from SAM
      s4-netlogon: make GetDomainInfo response match w2k8
      regenerate IDL
      s4-netlogon: always set the dNSHostName in GetDomainInfo
      s4-drs: ignore zero value elements in DRS add operations
      fixed spelling
      s4-drsserver: fixed addition of sort control
      s4-dsdb: added dsdb_find_sid_by_dn()
      s4-dsdb: cope with windows sending extra pad bytes
      s4-drs: fill in more guids and SIDs, plus filter rDN
      s4-libnet: avoid a steal with references error
      s4-libnet: allow the functional level of becomeDC to be specified
      s4-drs: add SHOW_DELETED control on dsdb utility calls
      s4-drs: include deleted objects in getncchanges reply
      s4-drs: fixed the size of DN binary blobs on the wire
      s4-ldb: add instanceType in repl_meta_data module
      s4-ldb: sort replPropertyMetaData by attid
      s4-drs: add defines for replication flags on attributes
      s4-drs: regenerate IDL after ndr size change
      s4-drs: el may not be a talloc pointer
      s4-drs: fixed sorting of replPropertyMetaData
      libds: fixed spelling error
      s4-acl: fixed SD creation
      s4-dsdb: make dsdb_search_dn_with_deleted public for repl_meta_data module
      s4-dsdb: ask for an extended DN in dsdb_find_dn_by_guid()
      s4-repl: use GUID to resolve target in linked attributes
      s4-samdb: free the linked_attributes list on prepare commit failure
      s4-repl: free the la list on prepare commit failure
      s4-samdb: when UF_SERVER_TRUST_ACCOUNT is set mark object as critical
      s4-ldap: fixed spelling
      s4-drsutil: allow NULL filter
      s4-dsruapi: plugfest updates
      s4-drsuapi: state variable for getncchanges
      s4-drs: removed debug code that replicated a maximum of 10 objects at a time
      s4-dsdb: fixed searching for GUID based DNs between partitions
      s4-dsdb: update replPropertyMetaData on linked attribute source attributes
      s4-dsdb: removed extraneous debug messages
      s4-libnet: fixed debug formatting
      s4-make: add libds to etags/ctags source list
      s4-dsdb: don't return the partition root objects
      s4-kcc: remove stale repsFrom entries in kcc run
      s4-kcc: fixed corruption of repsFrom records by kcc
      pidl: added union padding for NDR64
      idl: ntsvcs.idl depends on misc.idl, not winreg.idl
      idl: use common netlogon bit definitions
      s3-ads: removed 3 unused defines
      ds-flags: use the new name DS_DNS_FOREST_ROOT
      s4-cldap: match w2k8-r2 for cldap netlogon bits
      s4-ldb: Add support for binary blobs in DNs
      s4-ldb: accept the binary DN OIDs in extended DN modules
      ndr64: added support for trailing gap alignment
      s4-libnet: give sane error messages when functional levels don't match
      idl: rebuilt the IDL for the build farm
      s4-samr: fake up a samr_ValidatePassword response
      s4-torture: added a very simple samr ValidatePassword test
      pid: update ndr testsuite for new union alignment
      pidl: fixed unit tests for trailer alignment
      s4-pygensec: a bit closer to working
      s4-test: skip python gensec test until its finished
      s4-samdb: added some debugging
      s4-samldb: the samldb module requires that the primary group exists
      s4-ldb: overallocate idxptr to reduce memory fragmentation
      s4-ldb: fixed a memory leak
      s4-winbind: support the Samba3 TXT form of the info3 for wbinfo -a
      s4-winbind: support the s3 response flags on krb5 auth too
      Revert "s4-ldb: fixed a memory leak"
      Revert "s4-ldb: overallocate idxptr to reduce memory fragmentation"
      Revert "s4-ldb: merged with master"
      Revert "s4:ldb Remove LTDB_PACKING_FORMAT_NODN"
      Revert "s4:ldb always talloc_free() the ldb_ldif_write context, even on success"
      Revert "s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA"
      Revert "s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks."
      pidl: added int3264 as a base type
      idl: some lsa vars are uint3264
      ndr: rebuild lsa IDL after recent change
      s4-seftest: skip hold.oplock for SMB2 as well
      s4-repl: added RELAX control and fix transactions
      s4-ldb: fixed error on single value error
      s4-drs: open samdb with system credentials when authorised
      s4-drs: fixed error message for drs_security_level_check
      s4-drs: take advantage of system session auth in dsbind
      s4-drs: added some debug lines to DsAddEntry()
      s4-provision: match win2003 functional level
      pidl: get the alignment right for uint1632 enums (NDR64)
      idl: recompile IDL for uint1632 change
      pidl: update PIDL tests for uint1632 enums
      tdr: teach TDR about uint1632 enums
      s4-torture: removed an accidental commit of a local test hack
      torture: disable the ValidatePassword test
      s4-drs: fixed a memory error introduced yesterday
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-drs: make DsBind a bit less verbose
      scripts: handle non-C files in minimal_includes.pl
      torture: fixed socket leak in BENCH-TCON test
      s4-selftest: don't run benchmarks on the build farm hosts
      pidl: don't warn for compatible scalar types in unions
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-repl: check that a DsGetNCChanges is a continuation, and fix sorting
      s3: Fix vfs_shadow_copy2 to allow in-path @GMT-xxx
      idl: added WSPP DrsOptions bit names
      libds: added nTDSDSA options flags
      s4-dsdb: added samdb_rodc() and samdb_ntds_options()
      drs: improved error checking
      ldb: fixed display of replUpToDateVector
      s4-drs: implement more of DsUpdateRefs
      s4-drs: support DRSUAPI_DRS_ADD_REF flag
      s4-devel: for devel scripts its better to use bin/ than $PREFIX/bin
      s4-script: flush DNS after adding new addresses
      s4-ldb: removed bugus RDN length check
      s4-ldb: removed incorrect rDN length test
      s4-dsdb: implement limit on rDN length
      s4-ldap: test the rDN size limit
      s4-ldaptest: "testgroup" is a bit too common
      s4-pvfs: fixed handling of SEC_FLAG_MAXIMUM_ALLOWED
      s4-smb: declare root_fid as a file handle
      s4-pvfs: implement root_fid support in posix backend
      s4-torture: catch bad command line options
      s4-libcli: fixed structure element bug in ntcreatexreadx
      s4-smbserver: fixed root_fid in nttrans create
      s4-selftest: mark some CIFS backend tests as known fail
      s4-smb: fill in fnum as well for root_fid
      idl: added bit definition for privilege masks
      s4-torture: take privileges into account in BASE-MAXIMUM_ALLOWED
      s4-pvfs: fixed mask handling for SEC_FLAG_MAXIMUM_ALLOWED
      s3: fixed krb5 build problem on ubuntu karmic
      s4-winsrepl: don't put in attributes with no elements
      added NT_STATUS_NOT_OK_RETURN_AND_FREE()
      s4-privileges: moved privileges to private/privilege.ldb
      s4-torture: show the sid we are basing privilege tests on
      s4-provision: removed the old privilege attributes
      s4-provision: added the default privileges db
      s4-lsasrv: make sure only admins can alter privileges
      s4-torture: add a special check for administrators and privileges
      s4-security: honor more of the privilege access bits
      s4-pvfs: use privileges rather than "uid == 0" in unix access check
      s4-torture: cleanup after the MAXIMUM_ALLOWED test
      s4-torture: the BASE-CREATEX_ACCESS test is broken for non-administrators
      s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masks
      s4-pvfs: don't auto-apply privilege bits in unix acl handling either
      s4-schema: We should not need Samba4TopExtra now
      s4-torture: minor debugging enhancements
      s4-torture: fixed the default ACL for s4
      s4-pvfs: when uwrap is enabled, ignore chown errors
      s4-smbserver: removed bogus initialisation of two union arms
      s4: fixed howto for new binary name
      smb2-torture: samba4 allows SEC_FLAG_SECURITY to be used with privileges
      s4-pvfs: change the handling of access checking on create
      s4-smb2: fixed SMB2 find commands
      s4-pvfs: more fixes for ACLs on file creation
      s4-pvfs: fixed update of stream sizes
      s4-pvfs: the STREAM_INFORMATION calls don't need any access flags
      s4-pvfs: when reporting the file name, don't include the :$DATA suffix
      s4-pvfs: rename with full name gives SHARING_VIOLATION
      s4-streams: fixed handling of stream rename and overwrite
      s4-torture: fixed the streams tests for Samba4
      s4: spelling error
      s4-test: SMB2 oplocks in s4 are a mess
      s4-test: the ldap secdesc test is expected to fail for now
      s4-pvfs: fixed uninitialised variable
      s4-pvfs: another uninitialised variable
      s4-test: removed duplicate knownfail entry
      selftest: fixed filter to know about a "error" result
      s4-selftest: move secdesc.python test to skip list
      Revert "selftest: fixed filter to know about a "error" result"
      s4-pvfs: fill in alignment_requirement (valgrind error)
      s4-libnet: fixed privilege handling in samsync to use the right db
      s4-idmap: the idmap database should be indexed
      s4-pyldb: fixed 64 bit issues
      s4-selftest: fixed 'make testenv'
      util: fixed generate_unique_strs() to be portable
      selftest: try to get the valgrind errors showing again in the build farm
      tdb: fixed the intermittent failure of tdbtorture in the build farm
      lib-util: check for too many combinations in generate_unique_strs()
      s4-idl: don't call a variable 'stat'
      s4-dsdb: fixed empty structure error on solaris8
      s4-selftest: skip the trans2.scan test
      s4-torture: fixed a fd/mem leak in the RPC-LSA-SECRETS test
      s4-selftest: skip two more scanners
      s4-script: cleanup tmp files in minimial_includes.pl
      s4-torture: ran minimal_includes.pl over source4/torture
      s4: ran minimal_includes.pl on source4/winbind
      s4: ran minimal_includes.pl on source4/rpc_server
      s4: ran minimal_includes.pl on source4/client
      s4: ran minimal_includes.pl on source4/auth/ntlm
      s4: ran minimal_includes.pl on source4/auth/ntlmssp
      s4: ran minimal_includes.pl on source4/auth/gensec
      s4-selftest: the secleak test is not designed for automated running
      s4-torture: fixed a pipe leak
      s4-ldb: allow for non-null terminated ldb_val in ldb_dn_from_ldb_val
      s4-ldb: ldb_oom() for modules
      s4-ldb: ldb indexing rewrite - part1
      s4-ldb: when taking a list intersection, the result can be as long as the first list
      idl-drsblobs: mark some more reserved values as value(0)
      util: fixed place where we could look one byte past end of string
      selftest: make python run unbuffered
      s4-ldb: fast path for equal pointers
      s4-ldb: expose ltdb_err_map and ltdb_delete_noindex
      s4-ldb: do more validation of idxptr lists
      s4-ldb: delete empty index records
      s4-ldb: fixed tdb error handling in ldb_index.c
      s4-ldb: over-allocate index records to save on realloc costs
      s4-ldb: ensure new dn_list elements are not owned by caller
      s4-selftest: removed raw.unlink from quicktest
      s4-ldb: don't try to index non-indexed attributes
      s4-ldb: fixed some memory leaks in new indexing code
      s4-ldb: added a TODO about checking the indexlist
      s4-lsa: fixed the lsa server to cope with the new tests from gd
      s4-torture: fixed double free in libnet_group test
      s4-lsa: fixed breakage of lsa server
      s4-dsdb: create a static system_session context
      s4-dsdb: add a static samdb_credentials
      s4-ldbwrap: added re-use of ldb contexts in ldb_wrap_connect()
      s4-server: pre-open the main ldb databases in the server
      s4-server: call the ldb_wrap_fork_hook() after a fork()
      s4-ldb: added ldb_transaction_cancel_noerr()
      s4-ldb: use ldb_wrap_fork_hook() to cancel child transactions
      s4-ldb: move the tdb_reopen_all() calls to ldb_wrap.c
      s4-samdb: make sure the static credentials are never freed
      s4-selftest: lower some of the timeouts during make test
      s4-python: we need to include Python.h first
      s4-python: fixed annoyance where control-C doesn't kill our python scripts
      s4-ldb: fixed re-index during a complex transaction
      s4-ldb: don't allow modifies outside a transaction.
      tdb: detect tdb store of identical records and skip
      s4-dsdb: ensure that new partitions inherit any transaction
      s4-ldb: fixed string length handling on index records
      s4-ldb: ensure DNs pass validity tests in indexing
      s4-samdb: reduce the number of samdb opens at startup
      s4-ldb: allow for unescaped '=' in a index DN
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s4-ldb: fixed request handling for schemaUpdateNow op
      s4-ldb: '+' can also happen in base64 encoded index DNs
      s4-dsdb: always cancel transactions on all partitions
      s4-dsdb: call dsdb_make_schema_global() from ldb_wrap
      s4-hdb: go back to a separate samdb for the KDC
      s4-samdb: remove the rDN size constraint of 64
      s4-ldb: make DN escaping/unescaping consistent
      s4-ldb: changed the DN checks for \n to warnings
      fixed the build
      s4-ldb: allow ldap.py test suite to run directly against a file
      s4-ldb: fixed an issue in rename/modify indexing
      s4-ldb: make ldb tools line buffered
      s4-ldb: when -v is specified, show progress of ldbadd/ldbmodify
      s4-ldb: added a double-rename test
      s4-dsdb: make sure mod_usn list is zeroed on each transaction
      s4-dsdb: removed attributes that should not be displayed by default
      s4-ldb: added a warning about ldb_msg_add_dn
      s4-drs: we need to specifically ask for ntSecurityDescriptor
      s4-dsdb: some more attribuutes that we should only give if asked for
      libcli: allow ntstatus.h to be used by openchange
      s4-install: fixed install path for python scripts
      s4-smb2: check for an invalid lock flags combination
      s4-smb2: check for invalid SMB2 lock ranges
      torture: fixed SMB2-LOCK valgrind error
      s4-smb2: sequence numbers are not checked in SMB2_OP_CANCEL
      s4-smb2: SMB2 uses NT_STATUS_CANCELLED for cancelled locks
      s4-ldb: better to test for valid arguments in ldb library than commandline
      s4-ldb: improve detection of whether the server has a GC port
      s4-pvfs: fixed access check failure in SFILEINFO test
      s4-drstest: don't use getenv("LDB_URL") in test suites
      s4-torture: fixed expected error codes for s4 in SMB2-LOCK
      s4-ntvfs: move valid lock range test from smb2 layer to generic code
      s4-torture: mark s4 as doing valid lock range tests on SMB
      s4-selftest: s4 passes this test now
      s4-ntvfs: win7 does not check for the NONE smb2 lock flag on unlock
      s4-torture: fixed error code for s4 in SMB2-LOCK test
      s4-selftest: s4 passes all the SMB2-LOCK tests now
      s4-install: old systems don't have sed -i
      s4-drs: cope with bogus empty attributes from w2k8-r2
      s4-ldb: make it much easier to use common ldb controls
      s4-dsdb: don't call ldb_next_init() twice in objectclass module
      s4-ldb: check for -ve value for page size

Aravind Srinivasan (16):
      s4/torture: convert printf to torture_comment()
      s4/torture: add new SMB oplock tests
      vfs catia: Fix a possible NULL dereference
      vfs catia: Fix the double translation that was happening with createfile and open.
      vfs catia: Fix a NULL dereference when CATIA is loaded with no mappings specified.
      s4/torture: convert printf to torture_comment()
      s4/torture: convert printf to torture_comment() in RAW-OPEN
      s4/torture: Add two new SMB RAW-OPEN tests
      s4/torture: change comments to torture_failures
      s4/torture: Add SMB sharemode/access mask tests
      s4/torture: Ported SMBv1 RAW-STREAMS tests to SMB2-STREAMS
      s4/torture: convert all printf to torture_comments
      s4/torture: Ported SMBv1 RAW-OPEN tests to SMB2-CREATE
      s4/torture: add a new ulong parameteric torture option
      s4/libcli: add a FILE_NOTIFY_CHANGE_ALL macro
      s4/torture: Port SMBv1 Change Notify tests to SMBv2

Barry Sabsevitz (1):
      Fix bug 6802 - A created folder does not properly inherit permissions from parent.

Björn Jacke (49):
      s3:examples:ldap: fix some OIDs in various schema files
      s3:examples:ldap: allow substing search on more attributes in nds schema file
      nss_winbind: remove unused variable
      s3: BSD needs sys/sysctl.h included to build properly
      s3: ignore cups-config to tidy up library dependencies
      libreplace: white space cleanups
      s3: build with pam support when possible
      s3: update comment about (deprecated) a6 records
      s3:configure: don't throw away PRINT_LIBS
      s3:Makefile: fix talloc dependencies with static build
      s3:doc: add some detail about lanman auth parameter
      s3:configure: use --aѕ-needed linker option when supported
      s3:Makefile: net utility dependency cleanup
      s3:Makefile: libsmbsharemode dependency cleanup
      Revert "s3:Makefile: fix talloc dependencies with static build"
      s3:Makefile: fix talloc dependencies with static build (2nd try)
      s3:Makefile: fix libtdb dependencies with static build
      s3:Makefile: fix libwbclient dependencies with static build
      s3:Makefile: eventlogadm dependency cleanup
      s3:Makefile: fix libnetapi dependencies with static build
      s3:Makefile: minor clean up
      Revert "s3:Makefile: fix libnetapi dependencies with static build"
      Revert "s3:Makefile: fix libwbclient dependencies with static build"
      Revert "s3:Makefile: fix libtdb dependencies with static build"
      Revert "s3:Makefile: fix talloc dependencies with static build (2nd try)"
      s3:Makefile: another attempt to fix the talloc dependency
      s3:Makefile: another attempt to fix the tdb dependency
      s3:Makefile: another attempt to fix the netapi dependency
      s3:Makefile: another attempt to fix the wbclient dependency
      s3: make linking of libwbclient --as-needed safe
      Ñ•3: fix domain trust documentation confusion
      s3:net simplify padding to single printf call
      s3:net: simplify padding to single printf call
      s3: fix outdated proto.h causing build error on AIX
      s3: build pam_smbpass when possible
      s3:configure: fix avahi activation
      s3: allow using different LDFLAGS for internal libs/plugins
      s3: make unresolved symbols in libs throw errors
      s3:configure: add support for Solaris' ld -z ignore
      s3:Makefile: rename LDSHFLAG variables to make meaning more obvious
      s3:Makefile: add some explicit dependencies to libc
      s3:net: fix output of net rpc trustdom list
      Ñ•3:ldap: search for account policies in objectclass sambaDomain, not *
      Ñ•3:buildsystem: fix depenencies for libreplace
      s3:Makefile: add LIBREPLACE_LIBS for talloc, tdb and wbclient
      s3:ldap: don't search when no values where found
      s3: add support for full windows timestamps resolution on files
      s3/pam: move variable declaration into belonging ifdef section
      pam_winbind: fix a printf type mismatch warning

Bo Yang (6):
      s3: Don't overwrite password in pam_winbind, subsequent pam modules
      s3: Fix reference to freed memory in pam_winbind.
      s3: Don't fail authentication when one or some group of require-membership-of is invalid.
      s3: Fix crash in pam_winbind, another reference to freed memory.
      s3: Fix kerberos refresh chain.
      s3: Fix crash in free_file_list().

Brad Hards (1):
      s4:param remove reference to private header from source4/param/param.h

Brian Lu (1):
      s4: Check SUN compiler and remove "-fullwarn" when using it

Christian Ambach (2):
      changed debuglevel for two messages in the GPFS module from 0 to 10 they spammed the logs on a test machine and they are just debug messages, so let's move them to the level of the other debug messages in the file
      add e2fsprogs-devel as build dependency this is needed for AD because it contains libcom/libcom_err files and headers

Crístian Deives (4):
      added new function "ldb_msg_add_dn"
      s4-drs: Create connection obejct (nTDSConnection)
      s4-ldb: changed ldb_msg_add_dn() to ldb_msg_add_linearized_dn()
      s4-drs: add deletion of old connections

Dmitry Karasik (1):
      s4:wmic - Output enhancements

Endi S. Dewata (18):
      s4:provision - replaced linked_attributes with FDS plugins
      s4:auth - fixed problem reading bind DN from secrets database
      s4:ldb - fixed dangling pointer in ldb_request_add_control()
      s4:provision - fixed invalid creationTime format
      s4:dsdb - Fixed attribute dereferencing for FDS
      s4 - Mapped AD schema to existing FDS schema.
      s4:dsdb - Store SID as string in FDS.
      s4:dsdb - Removed redundant domain SID filter.
      s4 - SID allocation using FDS DNA plugin
      s4:provisioning - Fixed minor bugs in provisioning tool and partition module.
      s4:provision - Added initial implementation of FDSBackend and OpenLDAPBackend.
      s4:provision - Added start() method in LDAPBackend.
      s4:provision - Moved provision_xxx_backend() into backend-specific provision() method.
      s4:provision - Added setup() method in LDAPBackend.
      s4:provision - Added constructors for FDSBackend and OpenLDAPBackend.
      s4:provision - Added LDBBackend and ExistingBackend.
      s4:provision - Removed dependency on full Samba 3 schema from FDS
      s4:ldbcli - Added encoder/decoder for relax control.

Endi Sukma Dewata (1):
      s4: Use SASL authentication against Fedora DS.

Erick Nascimento (1):
      s4-drs: DsExecuteKCC() implementation

Fernando J V da Silva (5):
      s4-drs: Utility functions to deal with GUID
      s4-drs: Synchronous Implementation of generated parentGUID
      s4-drs: Removes stored parentGUID's creation and renaming
      s4-drs: Using dsdb_msg_add_guid() utility function
      s4-drs: Test situations for runtime constructed parentGUID

Günther Deschner (282):
      tdb: fix c++ build warning.
      s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.
      schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs.
      s3-rpc_client: use NL_AUTH_MESSAGE in create_schannel_auth_rpc_bind_req().
      s3-rpc_server: use NL_AUTH_MESSAGE in pipe_schannel_auth_bind().
      s3: remove unused RPC_AUTH_SCHANNEL_NEG struct and parsing functions.
      schannel: add missing prototype for ndr_print_nbt_string() in schannel helper.
      ntlmssp: add some void decode calls (useful for ndrdump).
      s3-nterr: add NT_STATUS_RPC_NT_CALL_FAILED.
      ntlmssp: avoid duplicate inclusion of helper headers.
      s3-winbindd: Fix Bug #6700: Use dns domain name when needing to guess server principal.
      s3-rpc_client: add enum dcerpc_transport_t to rpc_cli_transport struct.
      s3-rpcclient: add ncacn transport handling for rpcclient.
      s3-rpcclient: add lookupnames4 command.
      s3-util: add get/set_cmdline_auth_info_domain to user_auth_info struct.
      s3-nterr: add NT_STATUS_RPC_NT_PROTOCOL_ERROR to nt_errstr().
      schannel: more work on reponse NL_AUTH_MESSAGES.
      s3-schannel: use NL_AUTH_MESSAGE for schannel bind reply.
      s3-schannel: remove unused code.
      s3-errors: add NT_STATUS_RPC_NT_PROCNUM_OUT_OF_RANGE.
      s3-schannel: use NL_AUTH_SIGNATURE for schannel sign & seal (client & server).
      s3-schannel: remove last schannel hand-marshalling function.
      s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.
      s3-rpcclient: use cli_rpc_pipe_open_noauth_transport in rpcclient.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp and cli_rpc_pipe_open_ntlmssp.
      s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().
      s3-rpcclient: avoid using lp_workgroup() unconditionally for crypto.
      s3-rpcclient: make netlogon credential setup also work for interdomain trusts.
      lsa: use lsa_LookupNamesLevel in lsa_LookupSids{2,3}.
      lsa: fill in more unknowns in lsa_LookupSid calls.
      s3-rpcclient: add lookupsids3 command.
      s4-smbtorture: fix remaining lsa lookup call unknowns. sorry...
      s3-schannel: add dump_NL_AUTH_SIGNATURE.
      s3-dcerpc: remove more obsolete or duplicate headers.
      s3-ntlmssp: add missing prototype.
      s3-rpcclient: Fix Coverity #935: UNINIT.
      s3-eventlogadm: Fix Coverity #938: UNINIT.
      s3-netapi: Fix Coverity #670: FORWARD_NULL.
      s3-netapi: Fix Coverity #669 FORWARD_NULL.
      s3-netapi: Fix Coverity #668: FORWARD_NULL.
      s3-schannel: fix api_pipe_schannel_process(), was using incorrect buffer length.
      s4-schannel: strip trailing whitespace.
      s4-schannel: use NL_AUTH_MESSAGE for schannel.
      s3-rpcclient: fix netr_LogonGetCapabilities command.
      s3-netlogon: match all logon levels in netr_SamLogon calls.
      s3-netlogon: support validation level 6 in netr_SamLogon calls.
      libcli/auth: remove trailing whitespace.
      spnego: share spnego_parse.
      spnego: add spnego_proto.h.
      cifs-upcall: fix the build after spnego merge.
      s3-winbindd: add and use winbindd_lookup_sids().
      s3-winbindd: add and use winbindd_lookup_names().
      s3-schannel: fix Coverity #950 OVERRUN_STATIC.
      s3-nterr: print a NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED.
      s3-netlogon: Fix Coverity #945 UNINIT.
      s3-samr: Fix Coverity #934 UNINIT.
      s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.
      s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.
      schannel: remove unused schannel structs.
      s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.
      s3-dcerpc: remove duplicate RPC_AUTH_LEVEL flags.
      s3-dcerpc: remove more unused structs.
      s3-dcerpc: remove unsed auth type defines as seen on the wire.
      ntlmssp: better document to what structures we are reffering to.
      ntlmssp: pretty print a VERSION structure.
      s3-dcerpc: fix remaining old auth level constants.
      s3-dcerpc: really fix remaining old auth level constants. sorry...
      lib/crypto: add aes encryption routines to main cryto lib.
      s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in
      s4-schannel: strip trailing whitespace.
      s4-schannel: first step of decoupling schannel from gensec.
      s4-schannel: try to fix the build.
      schannel: move schannel_sign to main directory.
      schannel: fully share schannel sign/seal between s3 and 4.
      s3-schannel: remove unused schannel_decode/schannel_encode.
      lib/crypto: link in AES crypto for s4 as well.
      schannel: remove last traces of gensec.
      s3-smbd: fix get_ea_names_from_file() and check for pnames pointer.
      s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.
      s3-winbindd: add cm_connect_lsa_tcp().
      s3-winbindd: Fix Bug #6711: trusts to windows 2008 (2008 r2) not working.
      s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np
      s3: remove unused printing macros.
      s3-winbindd: no reason to call winbindd_can_contact_domain() three times in query_user().
      s3-libndr: fix build warning.
      lib/util: fix build warning.
      winreg: add winreg_Data union to IDL.
      s3: re-run make idl_full.
      s3-util: add push_reg_sz() and push_reg_multi_sz() convenience functions.
      s3-registry: use push_reg_sz().
      s3-registry: add regval_ctr_addvalue_sz.
      s3-registry: use regval_ctr_addvalue_sz().
      s3: use push_reg_multi_sz().
      s3-util: add pull_reg_sz() and pull_reg_multi_sz() convenience functions.
      s3-registry: use pull_reg_multi_sz().
      s3-util: use pull_reg_multi_sz in reg_pull_multi_sz.
      s3: use pull_reg_multi_sz in rpcclient and net.
      s3-rpc_parse: remove unused UNISTR2 struct and init function.
      s3: remove unused regval_build_multi_sz().
      s3: remove unused regval_convert_multi_sz().
      s3: remove unused unistr2_term_codes.
      s3-netlogon: properly implement _netr_NetrEnumerateTrustedDomains().
      s3-rpc_parse: remove unused prs_string.
      s3: re-run make idl. janitor for tridge.
      s3-registry: add regval_ctr_addvalue_multi_sz.
      s3-printing: use regval_ctr_addvalue_multi_sz.
      s3-registry: use pull_reg_sz() where appropriate.
      s3-printing: more use of pull_reg_sz().
      s3: remove unused rpcstr_pull and rpcstr_pull_talloc.
      s3-registry: move rpccli_winreg_Connect to the only file it belongs.
      s3: add perfcount idl and generated files.
      s3-perfcount: only pass down prs_struct when really required.
      s3-perfcount: more cleanup.
      s3: remove unused SYSTEMTIME struct.
      s3: remove unused PRS_POINTER_CAST macro.
      lib/tdr: get rid of build warning when using TDR_ALLOC macro.
      s3-net: print error when "net rpc changetrustpw" has failed.
      libndr: add int3264 ndr prototype.
      s3-netlogon: setup NETLOGON credential chain in rpccli_netlogon_set_trust_password() only when needed.
      s3-winbindd: make sure to reset connections when machine account password change chain was broken.
      s3: re-run make samba3-idl.
      s3-netlogon: pure cosmetic indent fixes in _netr_LogonControl2Ex().
      libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      wbinfo: allow to check trusts via "wbinfo -t --domain DOMAINNAME".
      s3-winbindd: libwbclient: implement secure channel verification for specific domains in wbcCheckTrustCredentials().
      s3-winbindd: NDR_WBINT_CHECKMACHINEACCOUNT should not be cacheable.
      s3-docs: remove xml artefact from net.8.xml.
      s3-netlogon: pass down account name to remote password set functions.
      s3-netlogon: allow to change any type of trust account password in trust_pw_find_change_and_store_it().
      s3: use enum netr_SchannelType all over the place.
      netlogon: add NL_PASSWORD_VERSION to IDL.
      docs: document wbinfo -t --domain DOMAIN behavior.
      libwbclient: add wbcChangeTrustCredentials.
      nsswitch: add wbinfo -c (change trust account passwords).
      docs: document wbinfo -c.
      s3-winbindd: add wbint_ChangeMachineAccount implementation.
      s3-passdb: missed two prototypes while moving to enum netr_SchannelType.
      s3-build: we need to have talloc 2.0.1 when building with external talloc.
      s3-spnego: Fix Bug #6815. Windows 2008 R2 SPNEGO negTokenTarg parsing failure.
      s3-spnego: fix memleak in spnego_parse_auth().
      s3-net: fix build warning (missing default in switch).
      s4-smbtorture: add very basic libwbclient testsuite.
      s3-selftest: enable WINBIND-WBCLIENT against s3.
      s3-libnetapi: add I_NetLogonControl{2} to IDL.
      s3-libnetapi: add I_NetLogonControl{2} skeleton.
      s3-libnetapi: fill in I_NetLogonControl{2}_r.
      s3-libnetapi: add I_NetLogonControl{2} to public headers.
      s3-libnetapi: add I_NetLogonControl{2} example code.
      s3-libnetapi: add nltest tool.
      s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.
      s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.
      s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling.
      s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON.
      nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().
      s3-netlogon: fix updating trust accout passwords with downlevel domains.
      gitignore: remove old netlogon prototypes.
      s4-smbtorture: test wbcLookupDomainController{Ex} in WINBIND-WBCLIENT.
      libwbclient: fix wbcLookupDomainController().
      wbinfo: use wbcLookupDomainControllerEx for wbinfo --dsgetdcname.
      s4-smbtorture: move all LookupNames tests into RPC-LSA-LOOKUPNAMES.
      s4-smbtorture: add stricter tests for LSA-LOOKUPNAMES replies.
      s3-lsa: allow to have NULL strings in lsa LookupName queries.
      s3-lsa: When looking up domains in LookupNames, do not strip the sid.
      s3-lsa: allow to lookup BUILTIN\ in lsa_LookupNames.
      s3-lsa: Allow to lookup 'NT AUTHORITY\Anonymous Logon' as well.
      s4-smbtorture: split out EnumTrustedDomainsEx test in RPC-LSA-TRUSTED-DOMAINS.
      s4-smbtorture: Fix wrong comment in RPC-LSA-TRUSTED-DOMAIN test.
      s3-selftest: enable RPC-LSA-PRIVILEGES against Samba 3.
      s3-lsa: Fix _lsa_CreateAccount() for usage of SEC_FLAG_MAXIMUM_ALLOWED.
      s3-pdb_ldap: fix crash bug in ldapsam_set_trusteddom_pw().
      s3-lsa: Fix _lsa_EnumTrustDom().
      s4-smbtorture: Make it simpler to specify number of trusted domains to create in
      s4-smbtorture: fix RPC-LSA-LSALOOKUP test against w2k3 and w2k8.
      nsswitch: fix the build of the winbind krb5 locator plugin.
      s3-lsa: make s3 pass against RPC-LSA-LOOKUPNAMES again.
      s4-smbtorture: test whether an lsa_EnumTrustDom implementation would hang up a client.
      s3-lsa: Fix _lsa_EnumTrustDom() and avoid infite windows client loop.
      s4-lsa: Fix dcesrv_lsa_EnumTrustDom() and avoid infite windows client loop.
      s3-lsa: use enum lsa_LookupNamesLevel in lsa_lookup_level_to_flags().
      s3-lsa: pure cosmetic indentation fixes.
      s3-lsa: use correct function name in_lsa_RemoveAccountRights().
      lsa: add LSA_SECRET access masks.
      s3-lsa: add lsa_secret_mapping.
      s3-passdb: add secrets_delete_generic().
      lsa: add LSA_TRUSTED_DOMAIN access masks.
      s3-lsa: add lsa_trusted_domain_mapping.
      adssearch: dump some more nttime timestamps.
      s3-net: acct_flags are uint32_t in net_sam_set_userflag().
      s3-passdb: move open_schannel_session_store() to passdb/secrets_schannel.c.
      s3: add secrets.idl.
      s3-secrets: use autogenerated code for TRUSTED_DOM_PASS struct parsing from a tdb.
      s4-smbtorture: fix warning in RPC-WKSSVC torture test.
      s3-lsa: use switch in _lsa_QuerySecurity().
      s3-lsa: expand struct lsa_info to carry name and sd.
      s3-rpcclient: add createtrustdom command.
      s3-rpcclient: add deletetrustdom command.
      s4-smbtorture: skip bigendian tests against s3 in RPC-LSA-SECRETS.
      s3-gencache: restore gencache_get behavior with NULL args (with torture test).
      s3-passdb: cleanup some callers of pdb_get_trusteddom_pw().
      s4-smbtorture: simplify some torture_comments in RPC-LSA.
      s4-smbtorture: skip QueryDomainInformationPolicy test against s3 in RPC-LSA.
      s4-smbtorture: skip QueryInfoPolicy2 while running RPC-LSA against s3.
      s4-smbtorture: skip three info levels while testing s3 with RPC-LSA.
      s3-lsa: fill in some more info levels in _lsa_QueryInfoPolicy().
      security: re-run make samba3-idl after IDL change.
      s3-netlogon: implement remote trust account changing in netr_LogonControl2Ex() and friends.
      s3-netlogon: implement _netr_NETLOGON_INFO_4 in netr_LogonControl2Ex() and friends as well.
      s3-netlogon: let s3 pass against RPC-NETLOGON-S3 again.
      s3-netlogon: make sure we protect some function codes in _netr_LogonControl2Ex().
      s3-kerberos: add configure checks for krb5_get_creds_X api.
      s3-kerberos: add smb_krb5_parse_name_flags().
      s3-kerberos: remove duplicate prototype.
      s3-kerberos: add smb_krb5_get_{creds,credentials} incl. support for S4U2SELF impersonation.
      s3-kerberos: fix some build warnings when building against heimdal.
      s3-kerberos: add smb_krb5_get_tkt_from_creds().
      s3-kerberos: add impersonate_principal for kerberos_return_pac_X calls.
      s3-net: allow to call "net ads kerberos pac <impersonation principal> -P".
      s3-net: better use memory credential cache in net_ads_kerberos_pac().
      s3-kerberos: modify cli_krb5_get_ticket to take a new impersonate_princ_s arg.
      s3-kerberos: use smb_krb5_get_credentials in ads_krb5_mk_req.
      s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket().
      Revert "s3-kerberos: add smb_krb5_parse_name_flags()."
      s3-netlogon: implement _netr_GetDcName and _netr_GetAnyDcName.
      s3-kerberos: let smb_krb5_get_tkt_from_creds() compile with older heimdal libs.
      s3-param: fix set_inherit_acls().
      s4-smbtorture: re-arrange netlogon LogonControl test.
      s3-netlogon: enable RPC-NETLOGON-ADMIN test against s3.
      s4-smbtorture: strip trailing whitespace in RPC-SAMR.
      s3-chgpasswd: split out a check_password_complexity() function.
      s3-samr: implement _samr_ValidatePassword().
      s3-rpc_client: make sure cli_rpc_pipe_open_schannel() does not always return NT_STATUS_OK.
      s3-kerberos: add smb_krb5_principal_get_realm().
      cifs.upcall: Fix Bug #6868: support building with Heimdal we well as with MIT.
      s3-kerberos: avoid using ERROR_TABLE_BASE_krb5 without checking.
      s3-kerberos: remove smb_krb5_get_tkt_from_creds().
      s3-rpcclient: use the parsed binding string flags for auth choice.
      s3-build: make sure to remove libds and client object files on make clean.
      s3-build: really fix build of winbind_krb5_locator.
      s3-build: delete more object files for "make clean".
      spoolss: fix spoolss_EnumPrinterKey IDL.
      s3-spoolss: fix spoolss_EnumPrinterKey client and server code.
      s4-smbtorture: add tests for spoolss_EnumPrinterKey to RPC-SPOOLSS-PRINTER.
      s3-printing: use spoolss types and structs while adding drivers.
      s3-printing: use spoolss types and structs while getting and deleting drivers.
      s3-printing: remove unused NT_PRINTER_DRIVER_INFO_LEVEL structs.
      s3-spoolss: move more defines out of nt_printing.h to spoolss.idl where they belong.
      s3-printing: remove duplicate code while cleaning up driver structs.
      s4-smbtorture: fix spoolss_EnumPrinterKey client in RPC-SPOOLSS-WIN.
      s3-spoolss: Fix GetPrinter level 101.
      docs: Fix Bug 6922: Add Registry patchfile for Win7 domain join.
      s3-registry: remove reg_pull_multi_sz().
      s3-registry: use push_reg_multi_sz() in registry_push_value().
      s3-spoolss: fixes for _spoolss_EnumPrinterKey client and server.
      s3-spoolss: re-arrange driver info level fillup functions.
      cifs.upcall: 2nd part of fix for Bug #6868: support building with Heimdal we well as with MIT.
      nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.
      s3-kerberos: add check for prerequisite krb5/krb5.h header while checking for krb5/locate_plugin.h.
      s3-registry: fix REG_MULTI_SZ handling in registry_push_value.
      s3-build: try to fix QNX build ("delay" is defined in lib headers).
      s4-smbtorture: add torture_samr_context to carry some RPC-SAMR-X specifics.
      s4-smbtorture: refactor RPC-SAMR-LARGE-DC test a little more.
      s3-kerberos: next step to resolve Bug #6929: build with recent heimdal.
      s3-spoolss: pre cosmetics: reorder levels in construct_printer_info levels.
      s3-winbind: properly include netlogon.idl in wbint.idl.
      s3-passdb: move some defines out of rpc headers (they really belong to passdb).
      s3-rpc: Avoid including every pipe's client and server stubs everywhere in samba.
      s3-rpc: running minimal_includes.pl on rpc_client and rpc_server.
      s3-smbd: no drsuapi server stubs yet in s3. Fixes the build, sorry.
      s3-spoolss: use macros to fillup driver levels.
      s3-kerberos: Fix Bug #6929: build with recent heimdal.
      s3-nsstest: drastically shrink size and dependencies of nsstest binary.
      pidl: fix handling of output arguments in s3 client stubs.
      misc: mark winreg_Data little-endian except for a REG_DWORD_BIG_ENDIAN.
      s3-kerberos: only use krb5 headers where required.
      s3-spoolss: simplify _spoolss_EnumPrinterKey a little more.
      s3-kerberos: do not include authdata headers before including krb5 headers.
      s3-kerberos: add a missing reference to authdata headers.
      s3-kerberos: fix the build on Mac OS X 10.6.2.
      s4-smbtorture: more and stricter tests for printer and data keys in RPC-SPOOLSS.
      s3-spoolss: fix fstrings in convert_devicemode() function.
      drsuapi: fix build warning of NDR size calculation of drsuapi_DsReplicaObjectIdentifier3Binary.
      s3-build: taise tdb version when building against system libtdb library.

Inra (1):
      s4: Fix "Small memory leak after calling several times lp_update"

Jan Engelhardt (1):
      s3/smbldap: add option to disable following LDAP refs

Jeff Layton (4):
      mount.cifs: print output to stderr
      mount.cifs: check access of credential files before opening
      mount.cifs: don't leak passwords with verbose option
      mount.cifs: get rid of CONST_DISCARD

Jelmer Vernooij (32):
      Mark test_security_descriptor_add_neg as known failing (for now).
      ldb: Support running testsuite without installing first.
      ldb: Remove references to operational module init function.
      repl_meta_data: Fix include path when building with standalone ldb.
      pidl: Remove unnecessary _GNU_SOURCE define.
      Fix string-wchar-fixed-array-01 test (when libndr is available).
      Fix string-wchar-fixed-array-02 test (when libndr is available).
      Fix string-wchar-fixed-array-03 test (when libndr is available).
      pyldb: Don't segfault when invalid type is specified to Dn.get().
      provision: Avoid linking in multiple copies of security python module.
      Check for PyString_FromString being NULL.
      Revert "s4:python  fixed subunit tests of dcerpc"
      PEP8
      Add init file for DCE/RPC tests.
      pidl(s4.python): Fix arguments to PyCObject_FromVoidPtr for string_array's.
      samba.tests.provision: Remove broken become_dc test.
      s4/make: Remove object files in ../libds as part of "make clean".
      ldb: Check for talloc using pkg-config before checking manually, so we
      registry: Fix warning freeing talloc pointer with multiple parents.
      pygensec: Add initial work on a gensec Python module.
      gensec: Avoid exposing lp_ctx on the API level.
      libutil: Add separate utility code for dealing with settings as a
      util/parmlist: Add some more comments.
      parmlist: Add basic tests for test_get_int().
      selftest: Prefer system tap2subunit if available.
      librpc: Fix path to ndr_standard pc file.
      rpc_server: Fix warnings.
      parmlist: Add more tests.
      make: Use $(base_srcdirs) in 'make clean' rather than keeping a separate
      Move samba-specific variable to s4 Makefile.
      pidl: Avoid using talloc_free as function pointer, since it may be a
      s3: Remove two more DFSG-nonfree text documents at release time. (Debian bug

Jeremy Allison (112):
      Fix bug 6673 - smbpasswd does not work with "unix password sync = yes".
      Add read() to socketwrapper. Metze please check.
      Fix compile in a usually non-selected define.
      Fix bug 6726 - Filename length overwrites oplock request field in cli_nt_create().
      Fix bug 6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.
      Torture test for bug 6529 - Offline files conflict with Vista and Office 2003.
      Remove ununsed variable warning.
      We now pass the Microsoft SMB2 fileio test with EA's and streams...
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      void functions can't return a value. Found by the Solaris compiler.
      Fix the problem with pidl generating invalid C for enums. According
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Check in modified generated files for systems where pidl can't run.
      Ensure we enclose the enum values in brackets to make the cast work.
      Re-generated idl files with () for enum values.
      Revert 918b5a7e057bd91289ec06b3ef8d95da43a50ede. This code
      Revert b39c390280d1f268e2550c731057aec550a3f086 - casts should not
      Remove the const from the str_list_XXX functions that
      Reduce debug log level from 0 -> 7 on non-critical message.
      Fix vfs module sample for new interface.
      Rewrite vfs_transparent example for the new VFS changes.
      Remove unused static fn.
      Update the advice for the new VFS system.
      Fix the opaque sample module for the new VFS interface.
      Second part of fix for bug #6235 - domain enumeration breaks if master browser has space in name.
      Don't defer a talloc_move'd pointer.
      Fix for CVE-2009-2906.
      Fix for CVE-2009-2813.
      NULL is not a valid event context.
      Fix bug #6769 - symlink unlink does nothing.
      Fix more use of VFS_STAT when posix pathnames selected.
      Missed one VFS_STAT -> VFS_LSTAT
      Remove lots of duplicate code and move it into one
      Fix bug 6776 - Running overlapping Byte Lock test will core dump Samba daemon.
      Test creating and deleting a bad symlink using the POSIX calls. Ensure
      Correct fix for bug 6781 - Cannot rename subfolders in Explorer view with recent versions of Samba.
      Make the logic a lot clearer and fix the comment to match.
      Oops. Don't break the build..
      Exteded RAW-RENAME test to catch regressions in bug 6781.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Cope with old CIFSFS clients that use SMBunlink to remove
      Catch one more erroneous use of errno.
      Remove use of "int ret" when we already have errcode.
      Final part of fix for bug 6793 - winbindd crash with "INTERNAL ERROR: Signal 6"
      Fix the build, missing ->.
      Fix valgrind memory leak in bug #6814 - Fixes for problems reported by valgrind
      Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. Caught by the torture tester. I love unit tests :-). Jeremy.
      Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code.
      Add comment explaining about symlink following & posix.
      Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
      Trying to find out why the posix_unlink test build farm is still failing even
      Fix the smbtorture4 build. root_fid is a "union smb_handle". tridge
      Fix posix_unlink test. Was doing grep without quotes around the
      Fix the pam_smbpass.so build with the recent linker flag changes.
      Remove pythonmods from the build in source3, it doesn't build anyway
      Fix "make install" by removing all references to python. Not currently
      Add local (or NFS) lock test to smbtorture. Checks that local locks
      Fix comments on new test.
      Fix bug 6828 - infinite timeout occurs when byte lock held outside of samba
      Turn on LOCK9 test which will test for regressions in bug 6828.
      Fix bug 6829 - smbclient does not show special characters properly.
      Simplify the logic.
      Second part of the fix for bug 6828 - infinite timeout occurs when byte lock held outside of samba.
      Start fixing the RAW-STREAMS test - ensure that the xattr
      Change RAW-STREAMS for s3 to allow rename over an existing stream,
      Fix bug 6867 - trans2findnext returns reply_nterror(req, ntstatus) In a directory with a lot of files.
      Convert from numbers to correct SMB_FIND_XX constant names.
      Fix more of the RAW-SEARCH test. Older info levels are
      requires_resume_key is a bool not int.
      Fix debug statements to use correct function name.
      Remove "Protocol" as an extern, and add accessor functions.
      Filter the returned DOS attributes by 0xFF for clients
      Fix debug comment (brain wasn't working...).
      Fix up some of the timing constants for DELAYWRITE. Add some extra tests up test_delayed_write_update6
      Get closer to an accurate model of Windows timestamp changes.
      Fix explicit set of write time on close.
      Simplify the logic - remove extraneous argument and calls to set_close_write_time().
      Remove the smbd:writetimeupdatedelay change Metze added. Metze please
      Revert commit "0551284dc08eb93ef7b2b2227a45e5ec21d482fb" - simplify
      Got the logic simplification worked out so we still pass
      Fix bug 6841 - "map acl inherit = yes" not working.
      Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Fix bug 6880 - cannot list workgroup servers
      Fix bug 6878 - Cannot change ACL's inherit flag.
      Second part of bugfix for 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
      Ensure every return path initializes presult as NULL.
      Fix bug 6891 - using windows explorer to change ownership on a folder fails with Bad File Descriptor.
      Ensure all callers to the rpc_client/cli_pipe functions correctly
      Revert "Ensure every return path initializes presult as NULL."
      Remove erroneous 'presult = NULL' changes. Now presult only gets set
      Remove unused variable warning.
      Don't overwrite a dynamic pointer with the address of a stack
      Remove "store create time" code, cause create time to be stored
      Start removing SMB_STRUCT_STAT variables except for
      Fix logic bug where high bits tests was being
      Fix bug #6898 - Samba duplicates file content on appending
      Proper fix for #6898 - Samba duplicates file content on appending. Pointed out by Volker.Restores the pathname handling for FILE_FLAG_POSIX_SEMANTICS but still prevents the O_APPEND problems. Jeremy.
      Remove unused code.
      Restore NtCreateX case handling with FILE_FLAG_POSIX_SEMANTICS to the way
      Fix make test. Only do POSIX case conversion if FILE_FLAG_POSIX_SEMANTICS set. Doh !
      Allow us to pass RAW-CHKPATH with FILE_FLAG_POSIX_SEMANTICS set or with
      Remove call into reduce_name if case sensitive. This allows us to pass
      Fix crash due to uninitialized pointer (not a problem in 3.4.x or below).
      Fix bug 6892 - When a chown operation is issued via Windows Explorer, all ACLS are wiped out.
      Add RAW-CHKPATH test with case-sensitive share.
      Make us pass RAW-CHKPATH with a case sensitive share.
      Fix warnings with talloc_asprintf.
      Restructure the connect function code to always call
      Fix bug 6938 : No hook exists to check creation rights when using acl_xattr module
      Fix DEBUG 0 -> DEBUG 10 (left over code).

Jim McDonough (1):
      s3: Fix incorrect rc check of nscd_flush_cache.

John H Terpstra (7):
      OPC oota edits
      Bug fix thanks to vjbangis viray
      Patches to fix typos thanks to OPC oota.
      Fix typos. Thank-you PC Oota.
      Change recommended bu PC Oota.
      Fixes for typos. Thank-you PC Oota.
      PC Oota Edits.

Kai Blin (3):
      AD-Bench: A first go at an Active Directory benchmark.
      README.coding: Update rules about code blocks and braces.
      ntlm_auth: use data_blob_talloc() to allocate session key

Kamen Mazdrashki (106):
      tort: Implement 'setup' and 'teardown' for DRSUAPI test cases.
      tort: Helper function to get DC info for testing
      tort: DsCrackNames - propagate torture context to all tests.
      tort: RPC-CRACKNAMES test case refactored
      s4/tort: CrackNames test update to work against W2K3.
      s4/tort: Make common setup/teardown drsuapi test funcs really common
      s4/tort: CRACKNAMES tests to use private structure for testing.
      s4/tort: Propagate torture_context and use torture_comment
      s4/tort: assert macro for drsuapi dcerpc call
      s4/tort: code clean up using torture_drsuapi_assert_call() macro
      s4/tort: RPC-DRSUAPI test case refactored to match torture architecture
      w32err: WERR_CLASS_NOT_REGISTERED updated
      w32err: NERR_ codes grouped together
      w32err: Sorting error codes in ascending order
      w32err: Re-define errors with numeric values
      w32err: Set hex format values for all errors
      w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND
      w32err: Script to fetch and prepare errors to be updated/added
      w32err: WERR_DOMAIN_CONTROLLER_NOT_FOUND error value fixed
      w32err: FRS_ group of errors replaced with numeric values
      w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUND
      w32err: WERR_USER_EXISTS replace with WERR_USEREXISTS name
      w32err: WERR_GROUP_NOT_FOUND renamed to WERR_GROUPNOTFOUND
      w32err: Importing auto-generated Win32 errors and descriptions
      s4-tort: Added assertion macro for DRSUAPI call
      s4-tort-drs: DsReplicaUpdateRefs test fixed and extended
      s4-tort-drs: Add bind_info for dcerpc_drsuapi_DsBind() call
      s4/drsuapi: ber_write_partial_OID_String() implementation
      s4/drsuapi: Internal implementation for ber_read_OID_String
      s4/drsuapi: ber_read_partial_OID_String() implementation
      util: fixed compile time "discards qualifiers" warning
      util: strhex_to_str() fixed to handle '0x' correctly
      s4/asn1: Added torture suite for ASN1
      s4/asn1: Added test for ber_write_OID_String()
      s4/asn1: Added test for ber_write_partial_OID_String()
      s4/asn1: Added test for ber_read_OID_String()
      s4/asn1: Added test for ber_read_partial_OID_String()
      s4/asn1: fixed typo in torture messages
      s4/asn1: local TALLOC_CTX should be child of torture_context
      s4/asn1: ber_read_OID_String() to be based on _ber_read_OID_String_impl()
      s4/drs(idl): Redefine drsuapi_DsReplicaOID in drsuapi.idl
      s4/drs(idl): Regenerate idl
      s4/asn1: Use explicite TALLOC_CTX in ber_write_OID functions
      s4/drs(NDR): Remove push/pull code for drsuapi_DsReplicaOID struct
      s4/drs(NDR): Print implementation for drsuapi_DsReplicaOID
      s4/drs: Propagate redefinition of drsuapi_DsReplicaOID into code base
      s4/drs(tort): TORTURE_DRS torture module - initial implementation
      s4/drs(tort): oid_from_attid() reference implementation
      s4/drs(tort): ignore drs/proto.h file
      s4/drs(tort): _drs_ldap_attr_by_oid() implementation
      s4/drs(tort): drs_util_DsAttributeId_to_string() function
      s4/drs(tort): _drs_util_verify_attids() to verify ATTIDs in objects received
      s4/drs(tort): fix compile time warning
      s4/drs: prefixMap module initial definition
      s4/drs(tort): prefixMap unit test initial implementatoin
      s4/drs(tort): fixed '==' to '>='
      s4/drs(tort): Comment typos fixed in drs_util.c
      s4/drs(tort): Unit test for prefixMap implementation.
      s4/drs: prefixMap main interface implementation
      s4/ldb: Fix double allocation for "ldb_url"
      s4/drs: Fix memory leek in prefixMap
      s4/drs: Move making of partial-binary-oid to a separate function
      s4/drs: Implement binary-oid-lookup into prefixMap
      s4/drs(tort): implement prefixMap comparison function
      s4/drs(tort): test for schema_prefixMap to/from drsuapi_prefixMap conversion
      s4/drs: schema_prefixMap to/from drsuapi_prefixMap conversion implementation
      s4/drs: Move schema_prefixMap allocation in separate function
      s4: Add DRS-UNIT test suite to LOCAL group of tests to be executed
      s4: DRS-RPC tests added to RPC group of tests
      s4/drs: dsdb_schema uses dsdb_schema_prefixmap definition
      s4/drs: dsdb_load_oid_mappings_drsuapi() -> dsdb_load_prefixmap_from_drsuapi()
      s4/drs: dsdb_get_oid_mappings_drsuapi() to use new prefixMap interface
      s4/drs: dsdb_verify_oid_mappings_drsuapi() replaced by dsdb_schema_pfm_contains_drsuapi_pfm()
      s4/drs: dsdb_map_oid2int() replaced by dsdb_schema_pfm_make_attid()
      s4/drs: dsdb_map_int2oid() replaced by dsdb_schema_pfm_oid_from_attid()
      s4/drs: dsdb_schema_pfm_from_drsuapi_pfm() to accept partial drsuapi_prefixMap
      s4/drs(tort): prefixMap to/from ldb_val serialization test case
      s4/drs: Load prefixMap from ldb_val moved in separate function
      s4/drs: refactor dsdb_load_oid_mappings_ldb() to use _dsdb_prefixmap_from_ldb_val()
      s4/drs(tort): Create temporary LDB for testing purposes
      s4/drs(tort): prefixMap read/write in LDB test case
      s4/drs: dsdb_read_prefixes_from_ldb() refactored
      s4/drs: dsdb_write_prefixes_from_schema_to_ldb() refactored
      s4/drs(tort): refactor - SCHEMA_INFO_DEFAULT defined on file scope
      s4/drs: prefixMap lookup by full_OID implementation
      s4/drs: dsdb_create_prefix_mapping() refactored
      s4/drs(tort): Test case for dsdb_create_prefix_mapping() implemented
      s4/drs(tort): _torture_drs_pfm_compare_same() should not fail tctx by itself
      s4/drs: remove unused num_prefixes and prefixes from dsdb_schema
      s4/drs: Remove unused structures and functions
      s4/drs: Refactor to be more SAMBA.Coding style compliant
      util: str_list_unique_2() test implementation
      util: str_list_unique() bugfix
      s4/drs(tort): 'DsPrivate.pipe' renamed - 'pipe' is a system call
      s4/drs(tort): 'DsSyncBindInfo.pipe' renamed - 'pipe' is a system call
      s4/drs(tort): replace 'printf' with 'torture_...' calls
      s4/drs(tort): use torture_drsuapi_assert_call() macro for error checking
      s4/drs(tort): replace DEBUG with torture_asert/comment/fail
      s4/drs(tort): Convert DSSYNC test to a test case fixture
      s4/drs(tort): DSSYNC test to print what is different in drs_msg also
      s4/schema(tort): Test LDB_SYNTAX_DN with extended_dn in [GUID;SID;DN] form
      s4/schema(tort): Add test for Object(OR-Name) syntax
      s4/schema(tort): Inject authOrig attribute into schema loaded for tests
      s4/schema: Object(OR-Name) syntax handling for DRS calls
      s4/schema: Handle Object(OR-Name) syntax in extended_dn_out module
      s4/schema(tort): Refactor DSDB-SYNTAX test for better performance

Karolin Seeger (23):
      s3/docs: Raise version number.
      s3/VERSION: Raise version up to 3.5.0.
      s3/VERSION: Raise version number up to 3.6.0.
      asn1_tests: Fix typo in comment.
      s3/proto.h: Add lp_ldap_ref_follow prototype.
      s3/docs: Add missing meta data to man ldbrename.
      s3:packaging: Fix building RHEL packages.
      Fix typo.
      s4:test: Fix typo.
      s3:docs: fake dir create times is a global parameter.
      s3:docs: Public is not a synonym for access based shareenum.
      s3: Rename new parameter "ldap ref follow" to "ldap follow referral".
      s3/docs: Document new pdbedit -K option.
      s3/docs: Remove reference to nonexistent file.
      s3/docs: Fix typo.
      s3/docs: Document "enable spoolss".
      s3/docs: Add "max protocol = smb2" to man smb.conf.
      create-tarball: Make it more comfortable to use the --copy-docs option.
      s3:docs: Document "cache directory" and "state directory".
      s3:docs: Document "enable core files".
      s3:docs: Document "ldap page size".
      s3:docs: Document "aio write behind".
      s3:docs: Fix typo in man mount.cifs.

Kirill Smelkov (5):
      tdb: kill last bits from swig
      tdb: fix typo in python's Tdb.get() docstring
      tdb: reset tdb->fd to -1 in tdb_close()
      tdb: add tests for double .close() in pytdb
      tdb: update README a bit

Kouhei Sutou (1):
      spnego: Support ASN.1 BIT STRING and use it in SPNEGO.

Marc Aurele La France (1):
      Fix bug 6707 - 3.4.1 segfault in parsing configs.

Matt Kraai (6):
      Ignore source4/dsdb/kcc/kcc_service_proto.h.
      Port the Samba 4 shm_setup to QNX.
      Port the Samba 3 shm_setup to QNX.
      Prepend "$libreplacedir/" to all objects in LIBREPLACEOBJ
      Use the method used by build_env.sh to discover the user name.
      README.Coding: Fix typos.

Matthias Dieter Wallnöfer (271):
      s4:dsdb/common/util - Indentation fixes
      s4:dsdb/common/util.c - Copy parameters to prevent segfaults
      s4:ldb_errors - add spaces
      s4:pwsettings - Introduce the LDB modify flags in the right way
      s4: Fix typo
      s4:"linked attributes" modules - correct the comments
      s4:torture - Fix uninitialized variable
      s4:simple_ldap_map - Enhance it for supporting "primaryGroupID" in the right way
      s4:provision - Change the "provision_users.ldif" file to support the "samldb" changes
      s4:provision - Add a new delete function only for users and computers
      s4:samldb - Major rework
      s4:samr - Fix up the SAMR server to support the primary group of a user in the right way
      s4:sam - Implement also here the right primary group behaviour
      s4:provision - Change the module order to match Windows Server
      s4:ldap.py - Adds a test for the primary group behaviour
      s4:subtree delete module - Cosmetic adaptions
      s4:Foreign security principals - Fix them up
      s4:samldb - Fix typo
      s4:simple_ldap_map - "primaryGroupId"
      s4:LogonGetDomainInfo - add a basic check for the hostname
      s4: Let the "setpassword" script finally use the "samdb_set_password" routine
      s4:tests/iconv - Fix a warning
      s4:templates - Remove the latest relics (in "dcesrv_lsa_CreateSecret")
      s4:provision - Cosmetic: Indent the parameters better
      s4:setpassword script - Passwords set by this script are set by the administrator not the user
      Revert "s4: Let the "setpassword" script finally use the "samdb_set_password" routine"
      s4:netlogon - Put the "supported encryption types" more back in the "LogonGetDomainInfo" call
      util_strlist: Add some more "const"s
      util_strlist: Add some more "const"s - small correction
      netlogon.idl: indent correctly
      s4:ldb_map_outbound - fix memory leak
      netlogon.idl - rerun "make idl"
      s4:group policies - add the domain controller group policy
      s4:group policies - upcase directory names of default group policies
      s4:group policies - the default group policy objects are all system-critical
      util_smb: For some (unknown) reason the previous patch changed the permissions - Reset them
      libds/common/flags: various
      s4/python: flags
      s4/domain behaviour flags: Fix them up in various locations
      s4:provision - Some rework
      s4:libnet_become_dc - Fix some uninitialised variables
      s4:descriptor - cosmetic
      s4:descriptor module - Revert and const fixups
      s4:provision - Some rework (continuation)
      s4:provision - Bump down the domain and forest level to Windows 2000
      s4:pwsettings - Simplify the error handling a bit
      s4:domainlevel - Add a script which allows raising the domain/forest level
      s4:domainlevel - fix indentations
      s4:minschema/fullschema - add correct header comments
      s4:samdb.py - Unification of the interfaces
      s4:domainlevel/pwsettings - Remove unused import
      s4:various scripts under "setup" - Unification
      s4:scripts - Cleans also the rest under the "setup" directory up
      s4/provision_configuration - re-add the "sPNMappings"
      s4:provision_configuration - "sPNMappings": "http" missed on regeneration
      s4:samdb.py - further rework
      s4:provision_basedn_modify - fix the "auditPolicy" attribute
      s4:domainlevel - further improvements
      s4:provision_configuration - fix "sPNMappings"
      s4:ldb_parse - Fix the type of an array entry
      s4:domainlevel - fixed another error
      s4:server.c - add linespace (only cosmetic)
      s4:dsdb/common/util - Check for the right forest/domain function level
      blackbox:test_kinit - Remove the "-H" (hive) parameter
      s4:sec_descriptor - fix constant
      s4:samba3sam.py test - remove the primary group ID attribute here
      s4:python tools - try to fix some test problems
      Merge branch 'master' of git://git.samba.org/samba
      Revert "blackbox:test_kinit - Remove the "-H" (hive) parameter"
      s4:scripts - Reintroduce "-H" parameter
      s4:libnet_become_dc - bump down the level requested by abartlet
      s4:samdb/tools - That should fix now the last failures
      s4:provision - Fix up ProvisioningError class as suggested by Jelmer
      s3:vfs_default - correct function parameters
      s3:util_str "str_list_make_v3" - introduce also here the "const" result
      s3: Fix up various string "const" warnings
      s3:smbd/password - move list pointers into blocks
      s4:auth/gensec/schannel - fix a const warning
      s4:LDIFs - enhance the section comments
      s4:domainlevel - General rework
      s4:dsdb/common/util - remove introduced "samdb_is_capable_dc" call
      s4:provision - Lets the user choose between the supported forest/domain function levels
      s4:pwsettings - Improve error handling and introduce "choice" type
      Revert "python: create a script for reorgnizing an LDB file."
      Revert "s4:wmic - Output enhancements"
      s4:pyldb - Fixed the return value in "py_ldb_msg_diff"
      s4:samba.tests.samdb - remove last relicts of the templates
      s4:ldb_msg_diff - Fixes up possible memory leaks and the python binding of it
      s4:pyldb - Wrong error type (found only after the push)
      s4:libnet_become_dc - add checks for valid domain/forest function levels
      s4:provision - Change the default forest/domain function level back to Windows 2003 Native
      s4:dsdb/common/sidmap - Remove
      s4:provision - Cosmetic - right indentations
      s4:ldb.h - cosmetic - add whitespace
      s4:provision_users.ldif - Put potential primary groups in front of the file
      s4/srvsvc: deactivate a "ntvfs_connect" with a wrong parameter
      s4: fix various warnings (not "const" related ones)
      s4:samdb_set_password - cosmetic fixes
      s4:samdb_set_password - Return the maximum password age when requested (not the minimum one)
      s4:rdn_name module - a normal error message should be enough for this failure
      s4:ldap.py - major enhancements
      s4:LDB/LDAP - Re-allow renames
      s4:ldb_ildap - Don't segfault on a empty RDN
      s4:ldap.py - add a very special rename test (with invalid - empty RDN)
      s4:repl_meta_data - various
      Revert "s4:LDB/LDAP - Re-allow renames"
      s4:rdn_name - fix up the rename operation
      s4:dsdb Don't allow creation of systemOnly objectclasses
      s4:ldap.py - add a test for the "systemOnly" classes
      s4:ldap.py - add tests for valid parent and RDN
      heimdal - fix various warnings
      s4:ldb.h - add constant for LDAP EXOP password change
      s4:schema_inferiors - Fix wrong check
      s4:objectclass - Free unused memory from responses
      heimdal kerberos - fix memory leak (free the plugin list always - not only in error cases)
      s4:ldb_tdb - fix memory leaks
      s4:ldap.py - commented out the UTF8 tests (and fixed some deletion DNs)
      s3/s4 common: fix up header file
      s4:acl module - intendation fix and comment enhancement
      s4:rootdse module - intendation fixup
      s4:various LDB modules - "build_request" functions - propagate result codes back
      s4:ldb_tdb - Rework/Various
      s4:ldap server - remove unused error handlings
      s4:ldb - add a check which has to be done on beginning of a "modify" operation
      s4:ldap.py - Further enhancements
      s4:subtree_delete - Make the initialisation of the child counter more clear
      s4:ldb - SQLite: port some constraints from the TDB backend also to the SQLITE one
      s3/s4:samr.idl - Corrects the "userPwdChangeFailureInformation" structure
      s3/s4 - Adapt the IDL changes on various locations
      winbind: adapt the new reject constants also there
      Revert "s4:ldb - add a check which has to be done on beginning of a "modify" operation"
      s4:wbclient.h - add compatibility constants
      s4:objectclass ldb module - Check for empty messages
      s4:provision.py - simplify the "realm" variable handling a bit
      Enhance ".gitignore" file for s4
      s4:ldb_tdb - Revert some introduced "trivial gotos"
      s4:dcesrv_samr - Cosmetics
      s4:dcesrv_samr - Add additional "talloc_free"s
      s4:dcesrv_samr - prevent "ldb_modify" on a possibly empty message
      s4:dcesrv_samr - add another constant
      s4:hdb-samba4 - Don't double-free "db"
      s4:loadparm - adapt "realm" handling
      s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where needed
      s4:torture - fix up "ldap_basic" test
      s4:password_hash - load the domain parameters from the "loadparm context"
      s4:torture cldap test - Add checks for the right forest DNS name
      s4:auth/credentials/credentials - fix uninitalised pointers
      s4:ntlmssp server - use also here the new "lp_dnsdomain()" call
      s4:w32err_code.py script - put it under "scripting/bin"
      s4:dcerpc_server - Read the generic session key out from "dcerpc_generic_session_key"
      s3: Try to fix the build on Solaris & AIX regarding the password change reject reason
      s4:winsdb - Substitute LDB result numbers with constants
      s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix a memory leak
      s3:srv_samr_nt - another fix for the reject reason
      s4:ldb_ldap - Fix intendation
      s4:ldb_msg - Use LDB constants on results
      s4:dcerpc_netlogon - unify the two workstation object lookups (DNS hostname and supported encryption types)
      s4:sites - get the server site (name) from DSDB
      s4:torture "cldap" test - rework and test more results
      Revert "s4:ldb_msg - Use LDB constants on results"
      s4:ldb_msg_check_string_attribute - add a comment about the result values
      s4:password_hash LDB module - substitute "lp_workgroup" with "lp_sam_name"
      s4:torture "cldap" test - restore the removed constraints and add more
      heimdal - hdb/ext.c - fix a "shadows variable" warning
      .gitignore: add "partition_proto.h"
      s4:provision - important fix for DNS domainname: lower realm
      s4:provision - rework the "guess_names" and "make_smbconf" method
      s4:smbtorture - Add "const" before "value"
      s4:libcli/security/access_check - Add "const" in front of "type"
      s4:ldb_sort - Add some more "const"
      s4:dsdb/samdb/cracknames - Remove unused header and add more "const"
      s4:provision - Reintroduce accidentally removed parameters and checks from "guess_names"
      ldb python bindungs - better use the "enum ldb_scope" for the search scope rather than "int"
      ldb:backend "connect" functions - convert result values to LDB constants
      Revert "ldb python bindungs - better use the "enum ldb_scope" for the search scope rather than "int""
      ldb:python bindings - make the intention by Jelmer ("int" vs. "enum") more clear
      ldb:tdb backend - be also here more careful with the result value
      s4:kdc/hdb-samba4 - Remove unused variable
      s4:nbt_server/wins/winsdb - Fix "const" warning
      s4:torture/raw/samba3misc - Add "discard_const_p" macro before a string
      s4:samdb python bindings - Reorder some function bodies to match the order in "ldb_wrap_connect"
      s4:samdb python bindings - make the python wrap connect more like the C one
      s4:samdb python bindings - add a wrapper for "dsdb_make_schema_global"
      s4:samdb_set_password/samdb_set_password_sid - Better comments and cosmetics
      s4:dsdb/common/util - Add a new utility function "samdb_check_password"
      s4:dcesrv_samr - Implement "dcesrv_samr_ValidatePassword" using my new check password call
      s4:torture/rpc/samr - Add a comment for "ValidatePassword" test
      s4:dcesrv_samr_ValidatePassword - I forgot to create an out buffer
      s4:torture/samr - Activate "ValidatePassword" test per default
      s4:torture/samr - Add status code on "ValidatePassword" test output
      s4:samdb_validate_password - Adapt the function to use the UNIX charset for the password data blob
      s4:dcesrv_samr_ValidatePassword - adapt call to "samdb_check_password"
      s4:dcesrv_samr_ValidatePassword - naturally this was only for debugging the failure
      s4:samdb_check_password - allow the password string to be NULL
      s4:dcerpc - fix DEBUG output warning
      s4:libnet_passwd - fix pointer type
      ldb_init: use constant for result of "ldb_setup_wellknown_attributes"
      s4:dsdb/common/util - samdb_result_hashes - use "unsigned int" for counters
      s4:lib/messaging - fix up the python bindings
      torture/basic/denytest - makes the code more compatible for TRU64 (consider buildfarm)
      s4:vfs_ipc - fix "ipc_open" for NTTRANS create requests
      s4:dcesrv_samr - Add more checks for invalid levels
      s4:ldap.py - Deactivates some at the moment pointless test parts
      s4:samdb util - add a call for generating a correct "lDAPDisplayName"
      s4:dsdb/repl/replicated_objects - Applicate also here the new "lDAPDisplayName" generator
      s4:ldap.py - enhance schema addition test
      ldb:python bindings - add a context on "py_ldb_delete"
      Revert "s4:dsdb/repl/replicated_objects - Applicate also here the new "lDAPDisplayName" generator"
      s4:SAMLDB module
      s4:SAMLDB DSDB module - Remove "\n" in LDB error messages
      s4:SAMLDB DSDB module - Add "\n"s on debug messages
      s4:provision_users.ldif - Descriptions generally begin with a majuscle
      s4:WINREG RPC server - remove a "talloc_free"
      ldb:ldb_tdb backend/indexes - DN comparison
      ldb:ldb_tdb backend/indexes - Outside API
      s4:ntvfs/posix/pvfs_acl - Remove unused variable "token"
      util/strlist: Fix up "const" warnings in the string list and test code
      tdb tools: Mostly cosmetic adaptions
      charset/tests/iconv - Remove the "const" from "ptr_in" to prevent "discard_const_p" use
      s4:WINREG RPC server - Cosmetic
      s4:torture/rpc/netlogon - Fix uninitialised variable
      s4:torture/raw/unlink - Remove unused variable and label
      s4:torture/smb2/notify - Rename nested "fname" variable to prevent warnings
      s4:torture/smb2/oplock - Remove unneeded "status" redeclarations
      s4:lsa RPC - Use more LDB constants
      s4:samr RPC - Use more LDB constants
      s4:lsa RPC - Fix type of variable "atype"
      s4:netlogon RPC - Fix up a comment
      s4:netlogon RPC - Fix up the error handling
      s4:netlogon RPC - Remove trailing whitespace
      s4:ldap.py - Add a check for the generated "schemaIDGUID"
      s4:ldap.py - activate test for operational attributes
      s4:libnet_become_dc - fix typo
      s4:ldap.py - fix the schema update test on Windows Server
      Revert "s4-netlogon: always set the dNSHostName in GetDomainInfo"
      s4:installmisc - install also the new "domainlevel" tool from the setup dir
      s4:operational LDB module - Don't do the write checks here
      s4:objectclass LDB module - Prevent write operations on constructed attributes
      s4:ldap.py - add a test for the enhanced operational attributes check
      s4:upgrade script - rename it to "upgrade_from_s3" and do some rework
      s4:howto.txt - add a notice about the upgrade possibilities and fix line spaces
      s4:WHATSNEW4.txt - Add also here a comment about the "upgrade_from_s3" script
      s4:setup/provision - make the interactive mode work again
      s4:provision.py - cosmetic output correction
      s4:provision - Fix up the provision of "standalone" and "member" mode
      s4:samba3.py - support the TDB version 3
      s4:samba3.py - don't read those informations out from the TDB
      s4:samba3.py - ignore comments in "smb.conf" files
      s4:upgrade.py - the import of WINS databases don't seem to work always
      s4:upgrade_from_s3 - Fix message outputs
      s4:upgrade.py - rework to make the upgrade s3 -> s4 possible again
      s4:tests.sh - Make also here the change from "upgrade" to "upgrade_from_s3"
      s4:upgrade.py - Umlaut problem
      s4:samba3.py (and test) - deactivate the tests until those parameters are fixed
      s4:provision.py - cosmetic
      s4:winbind - Fix it another time up
      s4:samba3.py - deactivate also the assertion on line 599
      s4:net utility - add a notice for the "help" operation and format it's output of the command list better
      s4:registry/util - Don't include the trailing '\0' in the internal data format but add it on the back-conversion to a string
      security.idl - Add some more wellknown SIDs/RIDs
      s4:security/sddl - rework of the security descriptor abbreviations
      s4:provision.py - remove hardcoded SIDs and RIDs
      s4:WINREG RPC server - Reintroduce the free operation on "CloseKey"
      s4:WINREG RPC server - add another "talloc_unlink" in "DeleteKey"
      s4:samba3.py/upgrade.py: Revert
      s4:upgrade.py - readd accidentally removed empty lines
      s4:upgrade.py - remove my copyright
      s4:setup/provision - Rework
      s4:upgrade_from_s3 - Move it back to "setup"
      Revert "s4:registry/util - Don't include the trailing '\0' in the internal data format but add it on the back-conversion to a string"
      lib/registry/util.c - Reorder the registry datatypes of the conversion functions

Matthieu Patou (24):
      Return a correct value for Supported Encryption Type
      s4: Pass WINBINDD_SOCKET_DIR var in order to overide the location of the Winbind socket
      s4: Fix parsing of CSDVersion: treat this field as an string null terminated.
      s4:sites & services - Adds Intersite transport containers
      s4: Script to build or rebuild extend DN attributes
      pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
      python: create a script for reorgnizing an LDB file.
      pythonbindings: allow add() to have an array of controls as second parameter
      s4-ldb: Add new relax controls that allow relaxed x500 constraints checks
      s4-ldb: Use relax control to check in replace metadata module if we accept request that specify objectGUID attribute.
      pythonbindings: allow add() to have an array of controls as second parameter
      s4: Improve provisioning: use relax control
      s4: Create a script for updating a running provision with change introduced since the initial provision
      s4: Fix missing TLS dir when targetdir is not the default one
      s4:upgradeschema.py Cleanup
      s4:upgradeschema.py Update to reflect recent change in provision
      s4: Rename the script
      s4: update What's new and explain how to upgrade a samba4 provision
      s4: Improve updateprovision
      s4: fix SD update and password change in upgrade script
      s4: load the domain level of the current provision and create a provision with the same domain level
      s4: don't forget to update defaultSecurityDescriptor
      s4: Handle the case in secrets.ldb without name attribute
      s4: Remove targetdir as it can cause some trouble and can be replaced by an adapted -s smb.conf

Michael Adam (105):
      tevent: add scripts to extract library symbols (exports file) from headers
      tevent: add script to extract signatures from header files.
      tevent: add script/abi_checks.sh. check for abi changes without gcc magic.
      tevent: move the original abi_checks script to script/abi_checks_gcc.sh
      tevent: add a make target "make abi_checks"
      tevent: remove filese generated by "make abi_checks" in "make clean".
      tevent: add abi_checks to "make test"
      tevent:mksyms: allow double pointer return value of functions.
      tevent:mksyms: allow characters after closing functions parenthesis.
      tevent:mksigs: ignore struct forward declarations.
      tevent:mksigs: correctly ignode multiline function typedefs
      tevent:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tevent:mksigs: normalize bool -> _Bool
      tevent:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:exports: add _tevent_req_cancel and tevent_req_set_cancel_fn.
      tevent:signatures: add _tevent_req_cancel and tevent_req_set_cancel_fn
      tdb:mksyms: allow double pointer return value of functions.
      tdb:mksyms: allow characters after closing functions parenthesis.
      tdb:mksigs: ignore struct forward declarations.
      tdb:mksigs: correctly ignode multiline function typedefs
      tdb:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      tdb:mksigs: normalize bool -> _Bool
      tdb:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      talloc:mksigs: ignore struct forward declarations.
      talloc:mksigs: correctly ignode multiline function typedefs
      talloc:mksigs: ignore symbols (like _DEPRECATED_) after closing function parentheses
      talloc:mksigs: normalize bool -> _Bool
      talloc:mksigs: allow PRINTF_ATTRIBUTE(..) macros function types as funcion args
      tevent:mksyms: fix spelling...
      s3:mksyms: fix spelling...
      talloc:mksyms: allow double pointer return value of functions.
      talloc:mksyms: allow characters after closing functions parenthesis.
      s3:dbwrap_ctdb: set dmaster in ctdb_transaction_store() also when updating an existing record
      dsdb: the samba3 ldap schema has no sambaAccountPolicy (any more at least)
      examples/LDAP: remove sambaAccountPolicy from the IBM-DS schema.
      tdb:tdbtool: add the "speed" command to the help text.
      tdb:tdbtool: add transaction_start/_commit/_cancel commands.
      tdb:tdbtool: fix indentation.
      build: add datadir to "make showlayout"
      build: add switch "--with-codepagedir=DIR" to configure.
      build: use AS_HELP_STRING() for --with-localedir
      s3: pdbedit: add option --kickoff-time/-K to set the user's kickoff time
      s3:dbwrap_ctdb: reformat a comment slightly to enhance clearness.
      s3:dbrwap_ctdb: add a function db_ctdb_ltdb_store()
      s3:dbwrap_ctdb: add a function db_ctdb_ltdb_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch()
      s3:dbwrap_ctdb: use db_ctdb_ltdb_fetch() inside db_ctdb_transaction_fetch_start
      s3:dbwrap_ctdb: fix a race in starting concurrent transactions on a single node
      s3:dbwrap_ctdb: add new db_ctdb_transaction_active() that calls CTDB_CONTROL_TRANS2_COMMIT
      s3:configure: add a check for the new CTDB_CONTROL_TRANS2_ACTIVE
      s3:dbwrap_ctdb: fix race condition with concurrent transactions on the same node.
      s3:dbwrap_ctdb: split combined check in two and add descriptive debug
      s3:dbwrap_ctdb: add debug message to transaction_fetch_start()
      s3:registry: add safety check for return value of tdb_unpack to regdb_fetch_keys_internal()
      s3:registry: add an extra check for dsize==0 to regdb_fetch_keys_internal()
      s3:vfs_fs_capabilities: fix a debug message
      s3:smbd: make idmap cache persistent for "ldapsam:trusted".
      s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()
      packaging(RHEL-CTDB): The former release number has basically moved into VERSION
      packaging(RHEL-CTDB): extend makespec.sh to extract VENDOR_PATCH from version.h
      packaging(RHEL-CTDB): Build winbind-32bit package in the 64bit build
      packaging(RHEL-CTDB): makerpms.sh: build winbind-32bit libs in the 64bit build
      packaging(RHEL-CTDB): makeversion.sh: v3-4-test uses source3 instead of source
      packaging(RHEL-CTDB):makespec.sh: fix detection of version
      packaging(RHEL-CTDB):makerpms.sh: replace source/ by source3/
      packaging(RHEL-CTDB): don't "make proto" any more.
      packaging(RHEL-CTDB): don't pass CFLAGS to make.
      packaging(RHEL-CTDB): fix location of nsswitch/ directory for install
      packaging(RHEL-CTDB): add new binary ldbrename to the common rpm
      packaging(RHEL-CTDB): add new binary sharesec to the client package.
      packaging(RHEL-CTDB): add new pam_winbind.mo to the common package
      packaging(RHEL-CTDB): also pack libwbcient in winbind-32bit package
      packaging(RHEL-CTDB): disable the merged build.
      packaging(RHEL-CTDB): pam_winbindd man page has moved from section 7 to 8
      packaging(RHEL-CTDB): package the manpage of "sharesec"
      packaging(RHEL-CTDB): package the manpage of "ldbrename"
      packaging(RHEL-CTDB): package the manpage of the winbind_krb5_locator plugin
      packaging(RHEL-CTDB): package the winbind_krb5_locator.so plugin
      packaging(RHEL-CTDB): move the idmap and nss_info modules to the common package
      packaging(RHEL-CTDB): fix packaging of pam_winbind.mo file
      packaging(RHEL-CTDB): enable parallel build
      packaging(RHEL-CTDB): add the current githash to the rpm release number by default
      s3:pdb_default_uid_to_sid: fix some debug statements.
      s3:passdb: remove the uid_to_rid method - we only need uid_to_sid
      s3:passdb: bump interface VERSION 18->19 (removed uid_to_rid)
      s3:is_trusted_domain: shortcut if domain name is NULL or empty
      s3:is_trusted_domain: shortcut if domain name == global_sam_name
      s3:fix a comment typo
      s3:load_interfaces(): use function gfree_interfaces() that we have.
      s3: shortcut uid_to_sid when "ldapsam:trusted = yes"
      s3:pdb_ldap: fix a comment typo
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_alloc_init
      s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_db_init
      s3:fix endianness bug in dbwrap_change_uint32_atomic() (bug #6901)
      s3:fix endianness bug in dbwrap_change_int32_atomic() (bug #6901)
      s3:idmap_ldap: fix indentation: tab/space mixup
      s3:torture: move the torture-specific headers to new torture/torture.h
      s3: add dbwrap_torture - a tool to stress test tdb transactions through dbwrap
      s3:fix the merged build of bin/smbtorture4
      s3:torture: make t_stringoverflow.c compile at least (pstring is long gone)
      s3:fix linking of libbigballofmud (on my box at least)
      s3:fix linking of the t_str* test programs
      s3:add split_tokens, a cmdline tool to test next_token_talloc()

Michael Ströder (1):
      s4: Exceptions in "provision.py"

Nadezhda Ivanova (28):
      Added "admin_session" method.
      Owner and group defaulting.
      security:idl Generated files
      Fixed a difference in domain sid type when SID is provided by user.
      Disable descriptor module unless enabled in smb.conf
      Initial implementation of security descriptor creation in DS
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Initial Implementation of the DS objects access checks.
      Merge branch 'master' of git://git.samba.org/samba
      s4:dsdb Fix of double addition of SD-s
      Fixed a dereferenced null pointer.
      Merge branch 'master' of git://git.samba.org/samba
      Removed the default DACL from token, as we will not be using it.
      Added some dn to the info in the log messages.
      Fixed a bug in object specific access checks.
      Fixed some missing flags and bugs in the security creation.
      Added security descriptor for the domain NC to provisioning.
      Version 1.0 of the directory service acls module.
      Fixes for some tests not eorking against Windows or Samba.
      Fixed some major bugs in inheritance and access checks.
      Fixed incorrect SID for RAS Servers.
      Added control copying for message types other than ldb_search.
      Some changes to allow processing of ldap controls on modify requests.
      Implementation of LDAP_SERVER_SD_FLAGS_OID on modify requests.
      Cosmetic patch - fixed case of attribute name.
      Implemented LDAP_SERVER_SD_FLAGS_OID on search requests.
      Fixed incorrect indentation.

OPC oota (1):
      s3:docs: Fix a typo

Olaf Flebbe (3):
      allow for outstanding_aio_calls to be decremented
      s3/loadparm: Fix severe HPUX compiler issue.
      correctly handle aio_error() and errno

Ronnie Sahlberg (2):
      add trailer alignment to structures
      New attempt at TDB transaction nesting allow/disallow.

Rusty Russell (7):
      Tell newbie devs about ./configure.developer
      lib/tevent: a cleaner fix for be4ac227842530d484659f2db683453366326d8b segv
      lib/tdb: TDB_TRACE support (for developers)
      lib/tdb: wean off TDB_ERRCODE.
      lib/tdb: add -t (always use transactions) option to tdbtorture
      lib/tdb: add tdb_check()
      lib/tdb: make tdbtool use tdb_check() for "check" command

SATOH Fumiyasu (1):
      Fix bug 6572 - libsmbclient: unable to access 'msdfs proxy' share.

Simo Sorce (10):
      Save and report the correct errno value.
      Check we read off the compelte event from inotify
      Fixing timeval calculation
      Fix builds with external talloc
      Fix builds with external tdb
      talloc: Change the way mksysms work
      talloc: Move release script under /script too
      talloc: Make abi checks in release script
      talloc: Fix exports and increment talloc version
      Fix map readonly in smb.conf, it is a single word

Stefan (metze) Metzmacher (1):
      Add in Metze's new code to ndr encode the user.DOSATTRIB

Stefan Metzmacher (98):
      lib/tdr: fix the build with --enable-automatic-dependencies
      s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()
      s4:drsuapi: add an incomplete DsAddEntry implementation
      s3:drsuapi: add a simple DsRemoveDSServer() implementation
      s4:repl_meta_data: remove unused code
      socket_wrapper: swrap_read() should use SWRAP_RECV* for swrap_dump_packet()
      s4:repl_meta_data: increment the attribute version with each change
      s4:heimdal_build: fix the build with --enable-automatic-dependencies
      s4:heimdal_build: fix one more problem with automatic dependecies
      lib/crypto: include aes.h into crypto.h
      libcli/auth: rewrite schannel sign/seal code to be more generic
      s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred
      s4:torture: don't use 'pipe' as variable name it's a system call
      named_pipe_auth.idl: add infrastructure to pass delegated credentials
      librpc: rerun 'make idl'
      s4:service_named_pipe: accept delegated credentials
      libcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe
      s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it
      s4:torture: the spoolss notify test should listen on the ncacn_np endpoint
      s4:ntvfs_ipc: add real named pipe support
      s4:rpc_server: remove some now unused code
      drsblobs.idl: add decoding for repsFromTo2
      rerun: make idl
      drsblobs.idl: fix repsFromTo2 blob size calculation
      librpc: rerun 'make idl'
      s4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7
      s4:build: require ldb 0.9.7
      dsdb/samdb: add resolve_oids module
      s4:provision: add the 'resolve_oids' on the top of the module stack
      blackbox/test_ldb.sh: test searching using OIDs instead of names for attributes and classes
      s4:dsdb/resolve_oids: check return values in recursion
      s4:dsdb/resolve_oids: add fast pathes for the common operations without oids
      tevent: make sure we don't set errno within the signal handler function.
      s3:lib/select: don't overwrite errno in the signal handler
      async_sock: return -1/EPIPE if we're getting an end of file on read.
      s3:winbindd: avoid writing to a closed connection and generate SIGPIPE
      s3:secrets_schannel: revert to using version 1
      Revert "r20074: this values seem to be typos in drsuapi"
      s3:rpc_server: we need to make a copy of my_name in serverinfo_to_SamInfo_base()
      Revert "s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn't work over ncacn_np"
      s3:rpc_client: don't randomly fragment rpc pdu's in developer mode
      s4:schannel: fix some compiler warnings
      s3:winbindd_cm: don't invalidate the whole connection when just samr gave ACCCESS_DENIED
      tdb: rename 'struct list_struct' into 'struct tdb_record'
      libcli/auth: don't leak the ldb_msg in schannel_store_session_key_ldb()
      libcli/auth: fix memory leak in schannel_creds_server_step_check_ldb()
      s4:gensec/schannel: remove unused talloc_reference() in schannel_update()
      libcli/auth: initialize creds in netlogon_creds_client_init_session_key()
      s4:dsdb/partition_init: don't leak a talloc_new() in case we have no data yet
      s4:loadparm: don't leak the names of all shares in each lp_service() call
      s4:dcesrv_samr: always use mem_ctx as initial parent for samr_*_state
      s3:configure: only check for gpfs_gpl.h
      tsocket: remove prototype of non-existing tsocket_address_inet_set_broadcast()
      tsocket_bsd: return -1 and set errno to ENAMETOOLONG if the unix path is too long
      tsocket: rewrite tsocket_guide.txt to reflect the current APIs
      s4:kdc: remove unused struct kpasswd_socket
      s4:torture/drs: move intern/ => unit/
      NET-API-BECOME-DC: resolve the host name to an address before calling
      s4:heimdal_build: allow flex-2.5.35 with bison-2.3
      s3:libsmb: avoid passing a function call as function parameter
      README.Coding: fix error in "good example"
      README.Coding: add section about usage of helper variables
      selftest: Fix unexpected failure handline in Subunit/Filter.pm
      selftest: make sure we don't buffer any output
      s4:selftest: place summary file into selftest-prefix
      s4:selftest: allways start with $(ST_RM)
      s4:selftest: use "dc:local" instead of a hardcoded config file
      netlogon.idl: fix ndr_pull_netr_DatabaseRedo()
      librpc: rerun "make idl"
      s4:dsdb/schema: let schema_supclasses() return the correct pointer
      s4:selftest: add "rpc.netlogon.*.GetDomainInfo"
      s4:selftest: avoid running the slow BASE-DELAY-WRITE test on the cifs proxy share
      s4:selftest: for now skip the BASE-DELAY-WRITE test completely
      selftest/output/plain.pm: report the testuite name on error
      selftest: ignore empty lines in knownfailures
      s4:torture/test_gentest.sh: make use of the PREFIX argument
      s4:selftest: fix logic for --option=torture:progress=no
      s4:ntvfs_generic: check for valid SMB2_LOCK flags
      SMB2-LOCK: make use of torture_assert_*()
      s4:selftest: mark samba4.smb2.lock.*.VALID-REQUEST as known failure
      selftest: Subunit/Filter.pm only allow expected failures without errors
      tdb: always set tdb->tracefd to -1 to be safe on goto fail
      tdb: add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behavior
      tdb: change version to 1.2.0 after adding TDB_*ALLOW_NESTING
      librpc/ndr: remember the highest offset we parsed with relative pointer buffers
      pidl:NDR/Parser.pm: update ndr_pull->relative_highest_offset after handling relative pointers
      Revert "Work around ndr_unpack failing on structures with relative pointers."
      librpc: rerun "make idl"
      s4:lib/ldb: change version to 0.9.9 after some critical index fixes
      s4:min_versions: require ldb 0.9.9
      RAW-PING-PONG: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:dbwrap_torture: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:torture/nbio: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      s3:torture: use timeval_current/timeval_elapsed instead of start_timer/end_timer
      pidl:NDR/Parser: $size can be 'foo / 2' so we need to add '(' and ')'
      pidl:Samba3/ClientNDR: $size can be 'foo / 2' so we need to add '(' and ')'
      librpc: rerun "make idl"
      s4:smb_server/smb2: don't reset highest_smb2_seqnum on SMB2 Cancel

Steven Danneman (18):
      lib/util: add unique string generator helper function
      s4/torture: add new torture_assert_*_todo() macros
      s4/torture/smb2: Fix several small bugs and style issues in SMB2 dir tests
      s4/torture/smb2: removed SMB2-FIND test
      s3 onefs: Fix a race condition exists in onefs_open.c between multiple opens to the same file.
      s3 onefs: Fix 1 second share mode delay handling
      s4/torture: Allow receiving of oplock break requests in any order
      s4/torture: fix RAW-OPLOCK-STREAM1 test after commit a11bb14
      s4/torture: fix typo in test comment
      s4/torture: Ported SMB oplock torture tests to SMB2
      s4/torture: rename oplocks.c to oplock.c to match SMB1 file layout
      s4/torture: second try on renaming oplocks.c to oplock.c
      s4/torture: Add server target of OneFS
      s4/torture: fix build break "implicit declaration of function 'isprint'"
      torture/smb2: make SMB2 BRL tests pass against W2K8R2
      s4/libcli: Initialize client PID for SMB2 connections
      s4/libcli: rename previously reserved field in SMB2 LOCK struct
      s4/torture: port SMBv1 RAW-LOCK tests to SMBv2

TAKEDA Yasuma (1):
      * install setup/display-specifiers files which are needed by provision script

Tim Prouty (9):
      s3: Add more helpful debugging to some of the streams code
      s4 torture: Fix RAW-STREAMS to request more specific permissions
      unlink defer torture test
      s4 torture: Split up the torture suite setup for RAW-SFILEINFO
      s4 torture: Add two new setfileinfo tests
      s4 torture: Allow onefs to be checked like samba3 and samba4
      s4 torture: Change RAW-OPLOCK to use the documented version of SET_END_OF_FILE_INFO
      s3 setfileinfo: Open with FILE_WRITE_DATA when setting the file size
      s3 selftest: Add RAW-SFILEINFO-END-OF-FILE to selftest

Torgeir Lerkerød (2):
      S4: Building on a system with libintl
      S4: ldb_map modules uses defines that are reserved

Volker Lendecke (183):
      s3:libsmb: Convert (state->received) to (state->received != 0)
      s3:winbind: Make the pam_auth subfunctions static
      s3:winbind: Remove pointless <cond> ? true : false;
      s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpy
      s3:smbd: Add the ntstatus to the smb_panic in share_mode_lock_destructor
      s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new API
      s3:winbind: Convert WINBINDD_SET_MAPPING to the new API
      s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new API
      s3:winbind: Convert WINBINDD_SET_HWM to the new API
      s3:smbd: Add a "hidden" parameter "share:fake_fscaps"
      s3:docs: Add info about how to obtain cifs module in cifs mount helper manpage
      s3:vfs: Fix the build of vfs_tsmsm after the VFS rewrite
      s3:libsmb: Fix bug 6606 -- short reads in smbclient were not handled
      s3: Test short reads in the build farm
      s3:vfs_modules: Fix Coverity ID 946: OVERRUN_STATIC
      s3:vfs_catia: Use talloc_zero for simplification
      s3:vfs_catia: Make some fns static
      Second part of bug fix for 6606.
      s3: Add some debugs to streams_xattr
      s3: Fix reading beyond the end of a named stream in xattr_streams
      s3:winbind: Fix some enum type mismatches found by the Solaris compiler
      s3:smbd: Fix an inappropriate pointer return in a bool fn
      s3:smbd: Attempt to fix the build on HP/UX
      s3:smbstatus: Fix some nonempty blank lines
      s3:smbstatus: Fix bug 6703, allow smbstatus as non-root
      s3: Fix Coverity ID 581 -- NEGATIVE_RETURNS
      s3:winbind: Fix an uninitialized variable
      s3:gencache: Add a "was_expired" argument to gencache_get_data_blob
      s3:gencache: Remove some over-paranoid locking
      s3:gencache: Make gencache_del() return success for expired entries
      s3: Make the vfs_gpfs compile at least
      s3: Remove an unused variable
      s3: Forgot to check in one build failure for vfs_gpfs.c
      s3:winbind: Make append_data publically available as append_auth_data
      s3:winbind: Sanitize the args for find_auth_domain: It only needs the flags
      s3:winbind: Make "check_request_flags" publically available
      s3:winbind: Make check_info3_in_group, sanitize its memory handling
      s3:gencache: Add my copyright
      s3:winbind: remove a pointless initialization
      s3: Remove the lua interpreter again
      s3: Document the "share:fake_fscaps" parameter, fix bug 6765
      s3: Make default_[static|shared]_modules a bit more readable
      s3:winbind: Fix a debug message
      s3:winbind: use talloc_tos() instead of NULL in fillup_pw_field
      s3:winbind: No point in using strequal to detect a 0-length string
      s3:winbind: use wb_fill_pwent in wb_getpwsid
      s3: Fix nonempty blank lines
      s3: Remove a scary error message -- talloc_move can not fail :-)
      s3: Attempt to fix machine password change
      s3:winbind: Fix typos
      s3:winbind: Slightly simplify the logic of nss_init(), make it static
      Revert "s3: Attempt to fix machine password change"
      s3:winbind: Make query_user_list in winbindd_rpc a bit more readable
      s3: Fix shadow copy display on Windows 7
      s3: Fix a memleak reported by dmarkey
      s3: Fix some nonempty blank lines
      s3:rpc: Fix is_known_pipename for dynamically loaded pipes
      s3:libsmb: Add cli_notify
      s3:torture: Add a notify-bench test
      s3:net: Fix a segfault in "net rpc trustdom list" for overlong domain names
      s3:winbind: Fix bug 6793 -- segfault in winbindd_pam_auth
      s3:winbind: Fix a double-free
      s3:winbind: Move fillup_pw_field() as static to wb_fill_pwent.c
      s3: Remove a pointless #endif/#ifdef pair
      s3: Fix the RPC server SUBSYSTEM declaration
      uuid.c: Remove some dead code
      s3: Make "debug hires timestamp" default to true
      s3: Fix a 100% CPU loop when ctdbd dies during a traverse
      s3: Remove debug_ctx()
      s3: Add parameter "ctdb timeout"
      s3: Fix the talloc hierarchy in notify_remove_onelevel
      s3: Fix a crash in notify_remove_onelevel when "change notify = no"
      s3: get_pipe_name_from_iface -> get_pipe_name_from_syntax
      s3: Get rid of explicit pipe names
      s3: Get rid of a NULL terminator
      s3: Register the ndr_interfaces dynamically
      s3: Do the printing for DEBUGLEVEL>=10 centrally
      tdb: Fix a C++ warning
      s3: Do not directly reference the ndr_table_* in rpcclient
      s3: Do not reference ndr_table_<pipe> in the cli_ routines directly
      s3: Consolidate getting the name out of a pipes_struct
      s3: Do not reference the ndr_tables in the server calls directly
      s3: Do not reference ndr_table when calling rpc_srv_register
      s3: Make run_rpc_command take strings instead of a ndr_interface_table
      s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table
      Revert "s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table"
      Revert "s3: Make run_rpc_command take strings instead of a ndr_interface_table"
      Revert "s3: Do not reference ndr_table when calling rpc_srv_register"
      Revert "s3: Do not reference the ndr_tables in the server calls directly"
      Revert "s3: Consolidate getting the name out of a pipes_struct"
      Revert "s3: Do not reference ndr_table_<pipe> in the cli_ routines directly"
      Revert "s3: Do not directly reference the ndr_table_* in rpcclient"
      pidl: Fix selftest after s3 code changed
      s3: Try to avoid dns searches with an empty site
      s3: Convert libsmb/cli_message to the async API
      s3: Fix debug messages in check_reduced_name
      s3: Convert cli_unix_extensions_version to async
      fix bogus "out of memory" winbind msg
      Fix large paged search
      s3: Tiny logic simplification
      Introduce tevent_req_simple_finish_ntstatus
      Introduce tevent_req_poll_ntstatus
      s3: Convert cli_set_unix_extensions_capabilities_send to async
      Attempt to fix the s4 build -- we can not use map_nt_error_from_unix in lib/
      s3: Add min_setup, min_param and min_data to cli_trans_recv
      Mention typedef struct in README.Coding
      s3: Fix a memleak in sys_popen
      s3: Fix the build on Solaris
      s3: Do not talloc in readdir
      s3: Replace some create_synthetic_smb_fname() calls
      s3: Do not kill the whole smb session if a machine pwchange failed
      s3: Factor timeval_string out of current_timestring()
      s3: Add some debugs to the winbind machine pwchange machinery
      s3: Re-check the timeout in machine_password_change_handler()
      s3: Protect against flooding the DC with pwchange requests
      s3: Avoid races to change the machine password in winbind
      s3: Cache brlock.tdb entries for the fast read&write strict locking code path
      s3: Remove a pointless memset
      s3: Tune if-conditions in a very hot codepath
      s3: Convert cli_get_fs_attr_info to the async API
      s3: Fix a bool/enum mismatch
      s3: Avoid two calls to strcmp()
      s3: Fix some nonempty blank lines
      mount.cifs: Fix a const error
      s3: Make the implicit reference to Protocol in mask_match() explicit
      s3: Make the implicit reference to Protocol in mask_match_list() explicit
      s3: Make the implicit reference to Protocol in is_in_path() explicit
      s3: Make the implicit reference to get_Protocol in lp_use_sendfile() explicit
      s3: Move the global variable Protocol to struct smbd_server_connection
      s3: Make alloc_sub_basic() static
      s3: Remove a struct typedef
      s3: Fix some nonempty blank lines
      s3: Fix bug 6338 -- net rpc trustdom list always display "none"
      s3: Move a variable declaration to its only use
      s3-winbind: In _wbint_CheckMachineAccount, there is only one child domain ever
      Revert "s3: Move the global variable Protocol to struct smbd_server_connection"
      Revert "s3: Make the implicit reference to get_Protocol in lp_use_sendfile() explicit"
      Revert "s3: Make the implicit reference to Protocol in is_in_path() explicit"
      Revert "s3: Make the implicit reference to Protocol in mask_match_list() explicit"
      Revert "s3: Make the implicit reference to Protocol in mask_match() explicit"
      s3: Always try SamLogonEx
      tevent: Fix a comment
      s3: Pass the "fake dir create times" parameter to sys_*stat
      s3: client "newer" does not look at the create timestamp
      s3: "dotareof" only looks at the file type
      s3: "tar_parseargs" only looks at the mtime
      s3: "parse_usershare_file" only looks at the mode and uid
      s3: "process_usershare_file" only looks at the mode and size
      s3: "process_usershare_file" only looks at the dev, ino, mode and size
      s3: "usershare_exists" only looks at the mode and mtime
      s3: "load_usershare_service" only looks at the mode and uid
      s3: "load_usershare_shares" only looks at the mode and uid
      s3: "disk_quotas" only looks at the devicenumber
      s3: "check_magic" only looks at the size
      s3: "print_job_end" only looks at the size
      s3: "cgi_download" only looks at the mode and size
      s3: "get_share_list" only looks at the mode and uid
      s3: "info_fn" only looks at the mode and uid
      s3: "count_num_usershares" only looks at the mode
      s3: "net_usershare_add" only looks at the mode and uid
      s3: "net_usershare_add" only looks at the device and inode
      s3: "net_usershare_add" only looks at the mode, device and inode
      s3: "net_conf_addshare" only looks at the mode
      s3: "write_block" does not use the sbuf at all
      s3: "read_block" only looks at the size
      s3: "regf_hbin_allocate" only looks at the size
      s3: "check_log_size" only looks at the size
      s3: "sys_path_to_bdev" only looks at the devicenumber
      s3: "socket_exist" only looks at the mode
      s3: "get_file_size" only looks at the size
      s3: "startsmbfilepwent" only looks at the inode -- is that enough?
      s3: Pass fake_dir_create_times down to file_exist_stat, none of the callers look at the mtime
      s3: Move directory_exist_stat to testparm.c, it only looks at the mode
      s3: Pass up fake_dir_create_times from atalk_build_paths
      s3: "copy_reg" only looks at mode, uid, gid, atime and mtime (no birthtime)
      s3: Restore "fake directory create times" as a share parameter
      s3: Factor out torture_setup_unix_extensions
      s3: Add a regression test for bug 6898
      s3: Fix some nonempty blank lines
      s3: Fix an uninitialized variable reference
      s3: Fix a "not handled in switch" warning
      s3: Fix bug 6288
      Fix bug 6546: Avoid accessing buf[-1] if NUL byte comes from fgets

Wilco Baan Hofman (5):
      regshell: Add support for 'cd ..' and cd relative to the root.
      Fix trailing garbage in the hbin block.
      Fix writing corrupt REG_SZ to the registry.
      Fix NULL pointer dereference in libgpo when listing Local Policy which has no security descriptor.
      Fix writing corrupt registries because of hardcoded version string in IDL.

Zack Kirsch (1):
      s3 onefs: Add some debugging/asserts to give more info when there is bad deferred open state.

Zahari Zahariev (4):
      Basic tests for nTSceurityDescriptor both SDDL and BASE64 format
      Tests for descriptor inheritance
      Python tests for the acl module.
      Added tests for descriptor inheritance on ldap modify.

ronnie sahlberg (1):
      PIDL fix for using external types with wireshark backend

-----------------------------------------------------------------------


-- 
Samba Shared Repository


More information about the samba-cvs mailing list