[SCM] Samba Shared Repository - annotated tag talloc-2-0-0 created - talloc-2-0-0

Karolin Seeger kseeger at samba.org
Tue Sep 8 06:57:45 MDT 2009


The annotated tag, talloc-2-0-0 has been created
        at  46d391f5089ef4fc96ddccb0682ad0613b15dae5 (tag)
   tagging  27b19eb9f61dec1c60d9c6abcf1fb2e12541f62a (commit)
  replaces  release-4-0-0alpha8
 tagged by  Karolin Seeger
        on  Tue Sep 8 14:56:46 2009 +0200

- Log -----------------------------------------------------------------
tag talloc-2-0-0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)

iEYEABECAAYFAkqmVJcACgkQKGi9fisXk1F27ACgwnUKwzwkY4pse1mce5vhYHNt
nUIAnjH5/6Jpz8aPPp9jozwKVILmKx/u
=TQM0
-----END PGP SIGNATURE-----

Alexander Bokovoy (3):
      Fix breakage for connect function after API change (connect -> connect_fn)
      Pass absolute file paths to Inkscape when transforming .svg files
      Merge branch 'master' of ssh://git.samba.org/data/git/samba

Anatoliy Atanasov (5):
      Fix for schemaUpdateNow command
      Test for schemaUpdateNow command
      Fix for DSSYNC test against Windows 2003
      Fix the dsdb_syntax_OID_ldb_to_drsuapi function
      First attempt to implement dcesrv_drsuapi_DsGetNCChanges

Andrew Bartlett (109):
      Partially revert restriction of socket_wrapper to 1500 byte writes
      On our way to alpha9!
      Allow developers access the the privilaged ldapi socket for the moment
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      Revert "s4:debug: make setup_logging() a bit more compatible with samba3"
      Fix ndrdump to use a common setup_logging() API
      s4:dsdb Explain the parsing steps for userPrincipalName cracknames calls
      Rework hdb-samba4 to remove useless abstractions.
      s4:kdc Only get the lp_ctx once for a LDB_fetch()
      s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookups
      s4: dsdb Avoid using the internal ldb_private.h header
      s4:ldb Allow rootdse module to build without ldb_private.h
      s4:param use talloc_unlink() to free iconv context holding references
      s4:ldb Fix talloc hirarchy in LDIF parsing code
      s4:ldb Rework use of talloc and ldif objects in python wrapper
      s4:net Move net_vampire() to net_vampire.c
      s4:auth It is easier to copy the session key than get talloc right.
      Add const
      s4:dsdb Allow unicodePwd to be set when adding a user
      Add a way to set an opaque integer onto a samdb
      s4:dsdb Handle dc/domain/forest functional levels properly
      s4:gensec Allow mutual auth to be turned off in 'fake_gssapi_krb5'
      s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED
      s4:gensec Rework gensec_krb5 mutual authentication defaults
      s4:heimdal: import lorikeet-heimdal-200907152325 (commit 2bef9cd5378c01e9c2a74d6221761883bd11a5c5)
      s4:kdc Initialise new hdb function pointers.
      s4:kdc rename functions from LDB_ to hdb_samba4
      s4:kdc Rework KDC to pull in less attributes for krbtgt lookups
      s4:heimdal: import lorikeet-heimdal-200907162216 (commit d09910d6803aad96b52ee626327ee55b14ea0de8)
      Revert "s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version"
      s4:kdc Add in a simple check for constrained delegation to self
      s4:provision Fix provision on FreeBSD
      s4:kdc Tidy up hdb_samba4 some more
      s4:heimdal Extend the 'hdb as a keytab' code
      s4:setup add 'cn' attribute to Samba4 local schema
      s4:kdc Push context to hdb_samba4 by way of the 'name' of the DB
      s4:kerberos Add 'net export keytab' command for wireshark decryption
      s4:kerberos Add test to show that we actually export the keytab
      s4:kerberos Add 'net export keytab' command for wireshark decryption
      s4:kerberos Add support for user principal names in certificates
      s4:tls Enable GnuTLS back to version 1.4 (an into the future)
      s4:libnet Add in a 'credentials' parameter for python libnet_Join
      Fix compile of py_net.c
      s4:provision We no longer add krbtgt or kpasswd account into secrets.ldb
      s4:samba3sam Remove extra newlines that broke samba3sam test
      Use smbclient binary for the test file in smbclient test
      s4:torture rework LDAP sort test
      s4:netlogon Fix warnings and segfault in GetDomainInfo call
      s4:ldif_handlers Allow a binary nTsecurityDescriptor when parsing LDIF
      Add const
      s4:torture Make RPC-NETLOGON pass against ncaclrpc servers
      s4:dsdb Don't cast an ldb_val into a const char * for schema lookups
      s4:ldb initialise e->values[i].length before use in python bindings
      s4:heimdal: import lorikeet-heimdal-200908050050 (commit 8714779fa7376fd9f7761587639e68b48afc8c9c)
      s4:heimdal: import lorikeet-heimdal-200908052208 (commit 370a73a74199a5a55188340906e15fd795f67a74)
      Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel
      s4:ldb Make error message in rnd_name more useful
      s4:torture Add test for the NTP signd server
      s4:provision Assume the OpenLDAP backend can find it's own modules
      s4:provision Make the --ol-slapd paramter take the full path to slapd
      s4:selftest Make OpenLDAP guess it's own modules from now on
      s4:selftest Don't start the slapd for the provision, only for the run
      s4:provision Allow provision-backend to not run slapd for 'make test'
      s4:ldap_server Don't talloc_steal (with references) in ldap_backend
      s4:ldap_server Remove another talloc_steal (with references)
      s4:ldap_server Correct removal of talloc_steal()
      s4:schema Provide a way to reference a loaded schema between ldbs
      s4:provision  Remove the ACI element from the provision templates
      s4:schema Allow a schema load on an unconnected database
      s4:python Push some helper functions from SamDB into samba.Ldb
      s4:setup Don't manually set @ATTRIBUTES any more
      s4:provision Move helper functions back to provision
      s4:provision Rework provision-backend into provision
      s4:provision A crude update of the OpenLDAP backend HOWTO
      s4:provision Keep a single transaction for the erase and rebuild
      s4:python Allow 'no such object' on the delete of the DN
      s4: Re-add --ldapadminpass as an option to provision
      s4:selftest Confirm that there isn't a listener on the ldapi:// socket
      s4:provison Print the LDAP backend admin username/password
      s4:provision Make sure that we don't use Kerberos to our LDAP backend
      s4:install Remove provision-backend script from 'make install'
      s4:provision Fix existing ldapi:// backend detection exception
      s4:libcli/ldap Explain why we set a hostname for ldapi:// connections
      s4:selftest Remove the 'subunit filter' from make testenv etc
      s4:ldb Remove obsolete comment about ldb_tdb's sequence num
      s4:provision Avoid one more call to ltdb_reindex
      s4:provision Add comments to the provision script
      s4:kerberos Use MIT compatible names for these enc types
      s4:ldb Use length-limited printf to avoid walking off end of strings
      s4:ldb Python requires that a 'compare' handler return -1, 0 or 1
      s4:ntp_signd Fix bug 6656 - Set protocol version to 0, as used by ntpd
      s4:dsdb use talloc_strndup() in GET_STRING_LDB() rather than walk off the end
      s4:dsdb remove unused variable
      s4:dsdb Add const
      s4:ldb Add python binding and test for ldb_msg_diff()
      s4:dsdb Use talloc_strndup() to ensure OIDs are null terminated
      s4:dsdb Rework show_deleted module not to liniearise the LDAP filter
      s4:python Fix the reprovision test by deleting 'deleted' objects too.
      s4:dsdb Use helper function to add 'show deleted' control
      s4:dsdb Rework dsdb_write_prefixes_to_ldb() to take a schema
      s4:scheam quiet a 'const' warning
      s4:provision Only create references to our server DN after the self join
      s4:provison Add prefixes to ldb using same code a later modify will use
      s4:schema Rework dsdb_write_prefixes_from_schema_to_ldb() to use talloc
      s4:ldb Add hooks to get/set the flags on a ldb_message_element
      s4:ldb Add ldb_ldif_write_string() and python wrappers
      s4:provision Ensure that @OPTIONS is mirrored into each partition
      s4:python Add helper to get at the domain SID
      s4:ldb Don't sleep(100) in this error case, but debug the LDIF

Andrew Kroeger (1):
      ldb: Properly handle NULL when copying attr lists.

Andrew Tridgell (108):
      added a sample script for the "idmap script" option
      added some basic documentation for the idmap script option
      fixed rpc smb code to not reply on talloc_free being a function pointer
      fixed the use of talloc_steal in ntlmssp_server
      removed a redundent talloc_steal
      fixed the reference to the global_schema
      use a talloc_unlink() as ops may have a reference
      fixed use of reference in pytalloc
      py_talloc_import now uses a steal, so this free is incorrect
      use py_talloc_reference instead of py_talloc_import
      another case that should use py_talloc_reference
      A rather strange varient of talloc_unlink
      gensec_start now steals the auth_context
      changes to remove the ambiguity in talloc_free() and talloc_steal()
      use the new talloc_reparent in two places
      use a talloc_reparent in a very ugly way
      removed a generated file
      a talloc_realloc() to zero size needs to use an unambiguous free
      fixed the talloc testsuite for the recent changes
      LDB_ERR_INVALID_DN_SYNTAX doesn't exist ...
      the settings structure needs to be initialised
      fixed the pull of drs schema elements
      Changed ldb.ERR_NO_SUCH_OBJECT to LDB_ERR_NO_SUCH_OBJECT.
      change talloc to 2.0.0
      decrypt all objects in a DRS record, not just the first one
      we can't use the unique index code for samAccountName
      show attribute values in sorted order to make comparison easier
      fixed support for readx greater than 64k
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      added a uid_wrapper library
      make the UID_WRAPPER skip checks at runtime
      skip the readbraw tests if the server does not support it
      fixed the sense of the pvfs_acl uwrap check
      s4 now supports the large readx extension
      fixed a uid_wrapper bug that caused a segv in the RAW-ACLS test
      handle large directories in smb2_deltree()
      fixed a problem with group policy writes causing policy corruption
      on buffer overflow windows gives SMBSRV:ERRerror here
      changed BCC handling for SMBwriteX to handle broken MacOSX client
      define uwrap_enabled() on Samba3
      set uidwrappersrcdir
      deliberately break the build
      Revert "deliberately break the build"
      make sure we never look past the end of either string in ldb_comparison_fold()
      fixed several places that unnecessarily take a reference to the event context
      use talloc with the global schema consistently
      prime the sam ldb schema in the parent samba process
      ensure that child tasks die when the parent dies
      fixed another ambiguous talloc call
      print server log on stderr as well as to log file
      Allow selection of the samba4 process model for 'make test'
      raise the debug level for a common message
      no need to shout about getting an oplock
      when we get an NDR error in the logs, it is useful to know where it happened
      try to give some hint as to what is causing NDR string errors
      fixed TESTS= in make test to allow multiple tests
      fixed the updateNow schema test to use a canonical OID
      make sure we update the current schema->prefixes when we add a new prefix
      fixed up some provision errors from the recent changes
      skip the autoidl test
      more fixups from provision changes
      fixed up add_foreign again
      sigh - still not right
      fixed the build
      fixed make test reporting success when provision fails
      we need the Deleted Objects container for replication
      added basic support for rename in DRS replication
      fixed getpass m4
      make lib/replace more usable in standalone builds
      updated talloc guide for recent API changes
      added talloc_set_log_* documentation
      updated XML source for talloc man page
      LIBREPLACEOBJ now contains the full path
      fixed typo in talloc doc XML
      note the semantic change in talloc_free from 2.0
      fixed a double free bug on error in net export
      fixed DRS rename of deleted objects
      added ldb_ldif_message_string()
      fixed spelling
      add a ref to the WSPP docs
      Wrap DRS changes in a transaction
      Display ldif formatted versions of all DRS changes at log level 4
      don't allow two controls to be added with the same OID
      change the dsdb_control_current_partition to not include internal variables
      add the partition_control control to replication requests
      added ldb_cmdline_help()
      use ldb_cmdline_help() in ldbsearch
      wrap the entire vampire operation in a transaction
      move the repl_meta_data module up the ldb module stack
      s4:dsdb rewrite the linked_atrributes code to commit in the end_transaction hook
      repl_meta_data should only be included when we are a DC
      traverse the ac list in reverse order
      show the full set of command line options for ldb tools
      support config files in the current directory
      fix the ndr print routines for samba4
      added dsdb_find_dn_by_guid()
      tell the server that we support linked attribute replication
      add the the linked attributes elements to the repl structure
      fixed transaction handling in linked_attributes module
      change repl_meta_data to process linked_attributes structures in end_transaction
      allow setting of the debug level in python from C
      added dsdb_find_guid_by_dn()
      always use prepare_commit in ldb transaction commits if possible
      show more reasonable object counts during a vampire
      greatly simplify the transaction processing in the partition module
      hook on prepare_commit instead of transaction_end
      another large change to the linked_attribute module
      report the location of the original talloc_free on double free

Aravind (1):
      torture/smb2: Adding SMB2 Directory enumeration torture tests.

Aravind Srinivasan (4):
      s3: forward MSG_DEBUG from smbd parent to all children
      s3: Add a new VFS op called SMB_VFS_TRANSLATE_NAME
      s3: Major revamp for catia vfs module
      s3: Add catia to the list of modules compiled by default

Björn Jacke (15):
      s3:dmapi: prefer dmapi libs from gpfs over system libs
      s3:pam_smbpass: fix build error on some Linux distros
      s3:configure: fix syntax error in avahi configure test
      tdb: fix define of tdbdir when srcdir != "."
      heimdal: don't include <ifaddrs.h> without knowing it's there
      s3/s4:build: honor library path from environment
      s3:configure: honor CFLAGS in compile tests
      libreplace: update library search path variables
      s3: QNX doesn't know uint - replace with uint_t
      s3: don't make same innetgr check twice
      s3: make d9c0d58236 better readble and reduce indentation
      s3: allow setting the TCP_QUICKACK socket option
      s3: make linking of rpcclient --as-needed safe
      Ñ•4:heimdal: teach heimdal that we have strnlen via libreplcae
      s4:heimdal: teach heimdal we have (v)aѕprintf in libreplace

Bo Yang (12):
      s3: Make smbd aware of permission change of usershare. Since usershare are relatively volatile and non-previledge users must disconnect from smbd and reconnect to it to make share permission in effect.
      S3: Small fix to get rid of annoying log message.
      s3: Fix double free in net usershare.
      s3: fix build of pdbedit and net_sam. Guenther, please check. Signed-off-by: Bo Yang <boyang at samba.org>
      s3: Fix crsh in net usershare list
      s3: don't do this, upper callbacks will check it
      s3: compile warning and upn handling
      s3: add failure check.
      s3: check in .po files for pam_winbind.
      Unable to browse DFS when using kerberos
      s3: Fix nss info substitution
      s3: add a test to test libsmbclient

Christian Ambach (3):
      do not merge ACEs with different SMB_ACE4_INHERIT_ONLY_ACE flag, this leads to wrong inheritance flags in the ACL e.g. (on GPFS) user:10000036:rwxc:allow (X)READ/LIST (X)WRITE/CREATE (X)MKDIR (X)SYNCHRONIZE (X)READ_ACL (X)READ_ATTR (X)READ_NAMED (X)DELETE (X)DELETE_CHILD (X)CHOWN (X)EXEC/SEARCH (X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED
      reject ACLs with DESC_DACL_PROTECTED on GPFS
      do not log chdir with level 0 if reason is access denied

David Markey (1):
      Fix bug 6514: net gives unhelpful "lp_load failed" when it's missing smb.conf

Don Davis (1):
      Rework the kerberos-notes.txt in order and format

Endi Sukma Dewata (1):
      s4:provision Fixes for Fedora DS schema mapping with full AD schema

Gerald Carter (1):
      idmap_adex: Fix usage of talloc_stackframe().

Günther Deschner (157):
      s4-smbtorture: fix test_GetInfoLevel crash bug in RPC-DFS.
      s3-libnet: fix libnet_unjoin_remove_machine_acct() when called without ads struct.
      samr: add samr_UserInfoLevel and samr_DomainInfoClass enums based on MS-SAMR.
      s3: re-run make idl.
      s3-eventlog: implement _eventlog_ReportEventW().
      s3-lsa: Fix error path in _lsa_EnumAccountRights.
      s3-spoolss: restructure _spoolss_EndDocPrinter().
      s3-printing: eliminate another non sec_initial_uid using security check.
      s4-smbtorture: more paranoid checks while testing group membership in RPC-SAMR.
      s3-samr: refactor _samr_QueryDomainInfo().
      s3-samr: refactor _samr_SetDomainInfo().
      s3-examples: make get_next_oid exectuable.
      s3-netlogon: fix validation level 2 support in netr_SamLogon and friends.
      s3-netlogon: remove init_netr_SamInfo functions.
      s3-netlogon: remove remaining netlogon init functions.
      s3-vlp: drastically shrink size and dependencies of the virtual line printer.
      s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.
      s4-smbtorture: add RPC-SAMR-MACHINE-AUTH test.
      s3-selftest: add RPC-SAMR-MACHINE-AUTH to list of test to run against s3.
      s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in passdb.
      s4-smbtorture: correctly test comment behaviour in RPC-SAMR-USERS against s3.
      s4-smbtorture: use torture_comment & torture_warning in RPC samr tests.
      s4-smbtorture: remove trailing whitespace from RPC-SPOOLSS.
      s4-smbtorture: Test for newly added form with enum call in RPC-SPOOLSS.
      s3-spoolss: Bug #6512. Fix support for enumerating user forms.
      s3-netlogon: remove unneeded fstrings from netlogon server.
      doserrors: print out some more werrors.
      s4-smbtorture: fix getjob test in RPC-SPOOLSS.
      spoolss: the flags in spoolss_PrinterInfo1 are in fact spoolss_PrinterAttributes.
      spoolss: fill in spoolss_AddPrinter IDL.
      s3-spoolss: implement _spoolss_AddPrinter.
      spoolss: the flags in spoolss_SetPrinterInfo1 are in fact spoolss_PrinterAttributes.
      spoolss: fill in spoolss_GetPrinterDriver IDL.
      s3-spoolss: add rpccli_spoolss_getprinterdriver convenience wrapper.
      libds: share UF_ flags between samba3 and 4.
      libds: merge the UF<->ACB flag mapping functions.
      s3-rpc_server: pass down full unix token to map_max_allowed_access().
      s3-pdb_ads: set correct pdb field with the value from 'accountExpires' attribute.
      samr: add missing samr_ValidationStatus codes.
      s3: re-run make idl.
      s3-account_policy: remove trailing whitespace.
      s3-account_policy: add pdb_policy_type enum.
      s4-smbtorture: restructure test_OpenPrinter_server in RPC-SPOOLSS a bit.
      s4-smbtorture: add some tests to check spoolss_SetPrinter behavior.
      s4-smbtorture: add RPC-SPOOLSS-PRINTER test.
      s3-passdb: fix wbc build warning.
      s4-selftest: ok, s4 cant print. add RPC-SPOOLSS-PRINTER to knownfail for now.
      s4-smbtorture: some work on getprinterdriver and getprinterdriver2 tests.
      s3-spoolss: make some of the command hooks static.
      s3-rpc_parse: remove more unused code.
      s3-ldapsam: bring Fedora DS LDAP schema in line with OpenLDAP schema.
      lsa: fix typo in lsa_TrustDomInfoEnum enum in IDL.
      s4-smbtorture: move all trusted domain tests to RPC-LSA-TRUSTED-DOMAINS.
      s4-smbtorture: move all privilege tests to RPC-LSA-PRIVILEGES.
      fix LSA-TRUSTED-DOMAINS
      fix LSA-PRIVILEGES
      s4-smbtorture: use torture_comment in RPC-LSA tests.
      s3-lsa: implement _lsa_EnumAccountsWithUserRight().
      s3-lsa: implement _lsa_LookupPrivName().
      s3-lsa: Fix pointless check for sec_info flags in _lsa_QuerySecurity().
      s4-smbtorture: use secinfo flags instead of numbers in lsa test.
      Revert "fix LSA-TRUSTED-DOMAINS"
      Revert "fix LSA-PRIVILEGES"
      lsa: fill in lsa_StorePrivateData and lsa_RetrievePrivateData and rerun make samba3-idl.
      s3-rpcclient: add LSA createsecret command.
      s3-rpcclient: add LSA deletesecret command.
      s3-rpcclient: add LSA querysecret command.
      s3-rpcclient: add LSA setsecret command.
      s3-rpcclient: add LSA retrieveprivatedata command.
      s3-rpcclient: add LSA storeprivatedata command.
      s3-lsa: Fix policy handle memleak and handle type check in _lsa_DeleteObject().
      s3-lsa: also implement level 13 in lsa_QueryInfoPolicy.
      s3-lsa: add (not yet activate) level specific access checks for _lsa_QueryInfoPolicy.
      s3-lsa: Fix access_mask calculation for new handle in _lsa_CreateAccount().
      s3-lsa: let _lsa_Delete return NT_STATUS_NOT_SUPPORTED as w2k3 does.
      spoolss: fill in spoolss_Create/DeletePrinterIC + rerun make samba3-idl.
      s3-rpcclient: add createprinteric command.
      spoolss: fill in some unknowns in spoolss_OSVersion and spoolss_OSVersionEx.
      s4-spoolss: fix the build after OsVersion changes.
      s3-pdb_ldap: Make ldapsam_alias_memberships behave like the tdbsam equivalent.
      s3-spoolss: fix crash bug in spoolss_addprinterex_level_2.
      s4-ldap_server: fix generated error string in map_ldb_error().
      s3-spoolss: Fix Bug #6568: _spoolss_GetPrintProcessorDirectory() implementation.
      s3-ldap: Fix Bug #5879. Update LDAP schema for Netscape DS 5.
      s3-wkssvcs: fix check for BUILTIN\Administrators membership in wkssvc_Netr{Join,Unjoin}Domain2.
      spoolss: fill in more details of the spoolss_DeviceMode.
      s3: re-run make samba3-idl.
      s3-spoolss: remove device mode defines from nt_printing.h.
      s3-spoolss: remove another duplicate copy of print_architecture_table.
      netlogon: document some more MSVC flags.
      spoolss: add more spoolss calls to IDL
      s3: re-run make samba3-idl.
      s3-spoolss: add stubs for new idl opcodes in spoolss server.
      s4-spoolss: add stubs for new idl opcodes in spoolss server.
      s3-idmap: fix two uninitialized variable warnings in idmap_tdb2.
      tevent: avoid using reserved c++ word.
      libndr: add missing protoypes for double type.
      s3-netlogon: Only hand out rid when netlogon credential chain has been setup sucessfully.
      netlogon: add (yet) undocumented netlogon negotiate bit to bitmap.
      netlogon: give netlogon w7/w2k8r2 AES negotiate flag proper name (see bug #6099 for details).
      s3-netlogon: make _netr_ServerAuthenticate a callback to _netr_ServerAuthenticate3.
      s3-netlogon: let get_md4pw() return a struct samr_Password.
      s3-netlogon: get rid of init_net_r_req_chal().
      Revert "s3: Fix uninitialized const char *"
      s3-netlogon: fix default case when _netr_LogonSamLogon is called from other opcodes.
      netlogon: make netr_NegotiateFlags a public bitmap.
      schannel: move schannel.idl to main directory.
      schannel: add generated files.
      s3-netlogon: let get_md4pw() return a struct dom_sid.
      s4-smbtorture: add RPC-NETLOGON-S3 to test samba3 netlogon server.
      s3-selftest: enable running RPC-NETLOGON-S3 against samba3.
      s4-smbtorture: add test_SetPassword_flags to RPC-NETLOGON-S3 testsuite.
      s4-smbtorture: do not hard code BDC secure channel type into RPC-NETLOGON tests.
      s3-build: add SCHANNEL_OBJ to Makefile.in.
      libcli/auth: rename schannel_state.c to schannel_state_ldb.c.
      s4-schannel: add ldb suffix to schannel functions.
      schannel: add netlogon_creds_CredentialState to IDL.
      libcli/auth: move netlogon_creds_CredentialState out of libcli.
      libcli/auth: add tdb backend for schannel state.
      s3-schannel: make open_schannel_session_store() public.
      s3-schannel: add simple wrappers to fetch and store schannel auth info.
      s3-netlogon: add netr_creds_server_step_check() convenience wrapper.
      s3-netlogon: use shared credential and schannel storage infrastructure for netlogon server.
      s3-schannel: upgrade old format schannel_store.tdb.
      s3-credentials: remove unused code.
      s3-schannel: remove remaining code that was using "struct dcinfo".
      s3-ntlmssp: remove trailing whitespace.
      ntlmssp: add IDL.
      ntlmssp: add ntlmssp helper skeleton.
      ntlmssp: add string helper functions to handle OEM and UNICODE charset.
      ntlmssp: add NEGOTIATE_MESSAGE to IDL.
      ntlmssp: add CHALLENGE_MESSAGE to IDL.
      ntlmssp: add AUTHENTICATE_MESSAGE to idl.
      ntlmssp: add NTLMSSP_MESSAGE_SIGNATURE to IDL.
      ntlmssp: re-run make samba3-idl and add generated files.
      ntlmssp: add ndr_print_ntlmssp_{nt,lm}_response() function.
      s3-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.
      s3-ntlmssp: use interface constants in TargetInfo blob.
      s4-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.
      s4-ntlmssp: use interface constants in TargetInfo blob.
      libcli/auth: remove unused NTLMSSP_NAME_TYPE_ flags.
      s4: fix the build after ntlmssp header change.
      s3-ntlmssp: add NDR helper routines for ntlmssp.
      s3-ntlmssp: use generated ntlmssp code for debugging purpose.
      s4: include ntlmssp header in auth/ntlmssp/ntlmssp.h.
      s3-netlogon: add DS_WEB_SERVICE_REQUIRED bit for dsgetdcname calls.
      netlogon: fill in more details for the netr_LogonControlX family of calls.
      wbclient: Fix Bug #6680: always activate handling of large (> 256 byte) ntlmv2
      s3-netlogon: implement _netr_LogonSamLogonWithFlags().
      s3-netlogon: rework _netr_ServerPasswordSet.
      s3-netlogon: implement _netr_ServerPasswordSet2.
      s4-smbtorture: test netr_ServerSetPassword2 against Samba3.
      s3-pdb_ldap: Fix bug #4296: Clean up group membership while deleting a user.
      s3-netlogon: use WERRORs in NETLOGON_INFO structures.
      s3-net: allow to exit "net rpc sh" with "q" as well.
      s3-ntlm_auth: fix two segfaults in diagnostics mode.
      wbinfo: fix various valgrind warnings and an invalid free.

Jeff Layton (13):
      mount.cifs: add support for sending IPv6 scope ID to kernel
      mount.cifs: don't pass text ro/rw options to kernel
      umount.cifs: don't build it by default
      cifs.upcall: use pid value from kernel to determine KRB5CCNAME to use
      cifs.upcall: clean up logging and add debug messages
      cifs.upcall: formatting cleanup
      cifs.upcall: declare a structure for holding decoded args
      cifs.upcall: try getting a "cifs/" principal and fall back to "host/"
      cifs.upcall: clean up flag handling
      cifs.upcall: use ip address passed by kernel to get server's hostname
      cifs.upcall: fix IPv6 addrs sent to upcall to have colon delimiters
      cifs.upcall: switch to getopt_long
      cifs.upcall: make using ip address conditional on new option

Jelmer Vernooij (32):
      pidl: Don't run compile tests inside the tree, won't work yet.
      TOSHARG: Fix typo: s/aquire/acquire/
      s4: Remove stub endpoint mapper script.
      s4 docs: Git has revision SHA's, not numbers.
      s4: Don't install epdump, since it no longer exists.
      Fix some typos pointed out by Oota Toshiya.
      ldb: Display SHLD_FLAGS when building.
      Remove pyldb_util and simply duplicate the 5-line function it contains,
      Actually fill in ldb modules directory.
      python: Set right ldb modules directory when using system ldb.
      VFS examples: Update copy of config.{guess,sub}.
      Remove outdated status file about samba3 -> samba4 upgrade project.
      Remove unnecessary include, update README.
      Create libndr-standard, which includes the NDR marshalling code for
      provision: Remove unused imports.
      Add missing includes.
      librpc: Integrate some subsystems now part of libndr-standard and integrate ndr_dfs in libndr-standard.
      Merge more ndr interfaces into libndr-standard.
      Remove unused variable.
      Include ntsvc NDR in libndr-standard.
      Merge branch 'master' of git://git.samba.org/samba
      Remove unnecessary imports.
      Remove unused parameter setting.
      pidl: Print proper errors when arrays don't have a specified size rather than spewing pages of perl warnings.
      pidl: Print actual type names in errors about unknown origins rather than 'HASH(0x....)'.
      Re-add accidently removed shares test.
      Remove RFC's from the release tarballs to make the lives of the Debian
      DCE/RPC(Python): Rename py_talloc_import to py_talloc_steal.
      python: Cope with the dom_sid2 alias in pidl's python generating code.
      pyldb: Raise proper exception when attempting to assign a string to a dn
      pyldb: Properly keep copies of Python string contents, rather than
      pyldb: Fix reference counting on ldb_message_elements, add extra type

Jeremy Allison (79):
      Fix coverity #676. Forward NULL.
      Fix coverity #920. Possible NULL deref.
      Fix coverity #900. Resource leak.
      Fix coverity #740. Resource leak in error paths. We should
      Fix coverity #729. Resource leak in error path.
      Fix bug #6506 - SMBD server doesn't set EAs when a file is overwritten in NT_TRANSACT_CREATE.
      Fix bug #6520 time stamps - e.g. last mod time is not preserved when "unix extensions=yes" are set - and using latest cifs vfs client
      Ensure we don't use delayed writes on POSIX opened files.
      When faking a create time, use the full timespec values, not time_t.
      The migration to struct stat_ex broke the calculation of
      Rename update_stat_ex_writetime() -> update_stat_ex_mtime()
      Add hash values to the xattr ACLS to determine when
      Remove reply_unixerror() - no longer needed. Should make Metze's refactoring a lot easier.
      Fix set_posix_lock check which had been reversed in the recent
      Make cli_posix_lock/unlock asynchronous.
      Revert this commit :
      When tallocing a memory block for the state in a tevent_req struct,
      Change to talloc_zero_size instead of extra memset.
      Make cli_unlock and cli_unlock64 async. Fix POSIX lock test.
      Fix bug #6551 - win98 clients cannot connect after server upgrade to samba-3.4.0.
      Tidyup prompted by #6554 - Wrong deallocation in sam_account_ok.
      Remove an unused talloc context.
      Replace short-lived NULL talloc contexts with talloc_tos().
      Replace more long-lived contexts with talloc_autofree_context().
      More conversions of NULL -> talloc_autofree_context()
      Fix bug #6564 - SetPrinter fails (panics) as non root.
      Move the initialization of smbd_server_conn from smbd/process,
      Fix a typo reading uninitialized memory. Caught by valgrind.
      Fix coverity CID 931. This check is redundent as smb_fname can
      Fix coverity CID 930. Pointer check can never be null here.
      Fix Coverity CID 929. Potential NULL deref after code refactoring.
      Fix Coverity CID 928. Removed check as this can never be null.
      Fix Coverity CIDs 887, 888. Don't pass NULL's to functions
      Make cli_send_mailslot() static. Preparing to do away with unexpected.tdb....
      Fix hash function in acl_xattr to be SHA256, make
      For some strange reason using :
      Make acl_tdb match acl_xattr. Large duplication of
      Factor out common code into vfs_acl_common.c.
      Fix the build breakage by #including modules/vfs_acl_common.c
      Added prefer_ipv4 bool parameter to resolve_name().
      (Hopefully) fix the problem Kai reported with
      SMB_INFO_STANDARD is not a valid info level on set,
      Remove the extraneous logic in smb_set_info_standard - we
      Fix bug #6529 - Offline files conflict with Vista and Office 2003.
      Tidy up treatment of ctime.
      We're not changing last write, but setting this to be FILE_NOTIFY_CHANGE_CREATION
      Add define guards around otherwise unused variable.
      Put SMB_INFO_STANDARD back into setfileinfo, but do it right
      Fix bug #5714 - NetBSD, ENODATA undefined, at least some releases.
      Remove a const warning.
      Correctly send out notify messages for timestamp changes.
      Move the checks for null timestamps down below the VFS_NTIMES
      Refactor the use of create_time and change time to go
      Ensure the fsp->fsp_name stat_ex struct is always
      Fix some warnings in the AIX ACL code.
      Add "store create time" parameter (docs to follow)
      Documentation for "store create time".
      Fix BASE-DELAYWRITE test by removing const from struct smb_filename
      When mapping EA's into a TDB, don't remove the EA
      Move build over to storing DOS attributes in EA's.
      Fix EVERY SINGLE build on the buildfarm that doesn't have
      Use defined names rather than numeric constants to make code
      Fix Red Hat bugzilla bug : https://bugzilla.redhat.com/show_bug.cgi?id=516165
      Fix bug #6647 - get_root_nt_token: getpwnam("root") failed!
      Fix bug 6638 - ADS Domain Member: Computer Mgr can not set share ACLs
      Fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Fix coverity CID: 932 - forward null.
      Try and fix the buildfarm by using getpwnam(root) instead
      Fix bug 6529 - Offline files conflict with Vista and Office 2003
      Log debug message when hires timestamps are available on the
      Implement Metze's suggestion of trying getpwuid(0) then getpwnam(root).
      Fix make test.
      Second part of fix for 6529 - Offline files conflict with Vista and Office 2003.
      Use existing time_t rounding function, don't invent my own.
      Allow systems with timestamp granularity of 1sec to work with
      Second attempt at fix for bug 6529 - Offline files conflict with Vista and Office 2003.
      Help debug for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Another part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.
      Hopefully last part of the fix for bug 6651 - smbd SIGSEGV when breaking oplocks.

Jim McDonough (4):
      Don't require "Modify property" perms to unjoin bug #6481)
      Don't use ads realm name for non-ads case.  #6481
      Fix cifs.upcall builds on some platforms (zlib)
      Fix make test_shlibs for libnss_wins and libnetapi (zlib)

John H Terpstra (4):
      Fixes inspired by OPC Oota.
      Replace word noone with more correct word nobody. Thanks OPC Oota.
      Merge branch 'master' of ssh://jht@git.samba.org/data/git/samba
      Fix typos reported by OPC Oota.

Kai Blin (67):
      s4: Add libwbclient backend to auth_winbind
      s4 auth_winbind: Don't allocate the rids for the info3 structure within the loop
      s4 auth_winbind: Internally, info3 has utf8 buffers, not utf16 buffers.
      Revert "net: Use samba default command line arguments."
      s3: net ads user info should print primary group as well (bug #2658)
      s3 net: Initial top level support.
      s3 net: i18n support for net ads
      s3: Update i18n files
      s3 net: i18n for net ads gpo
      s3 net: Correct path for net_ads_gpo.c
      s3 net: i18n support for net cache
      s3 po: Update msg files
      s3 net: i18n support for net conf
      s3 net: i18n support for net dom
      s3 net: i18n for net eventlog
      s3 net: i18n support for net file
      s3 net: i18n support for net group and net groupmap
      s3 net: Remove uid==0 check from net groupmap
      s3 net: i18n support for net help
      s3 po: Make adding translated files less tedious
      s3 net: i18n support for net idmap
      s3 net: i18n for net join
      s3 net: i18n support for net lookup
      s3 net: i18n support for net lua
      s3 po: Regenerate msg files.
      s3 net: i18n support for net rap
      s3 net: i18n support for net registry
      s3 net: i18n support for net rpc
      Revert "s3: Update i18n files"
      s3 net: net i18n in it's own module
      s3 net: i18n support for net rpc audit
      s3 net: i18n support for net rpc join
      s3 net: i18n support for net rpc printer
      s3 net: i18n support net rpc registry
      s3 net: i18n support for net rpc rights
      s3 net: i18n support for net rpc samsync
      s3 net: i18n support for net rpc service
      s3 net: i18n support for net rpc shell
      s3 net: i18n support for net sam
      s3 net: i18n support for net share
      s3 net: i18n support for net status
      s3 net: i18n support for net time
      s3 net: i18n support for net user
      s3 net: i18n support for net usershare
      s3 net: i18n support for net utility functions
      i18n: Update s3 net German translation.
      librpc: rerun "make idl_full"
      s4 ctags: Stop *_proto.h files from cluttering up the tags
      s3 wbinfo: Get rid of lp_ functions
      s3 net: Add getauthuser/setauthuser commands.
      s3 wbinfo: remove --get-auth-user and --set-auth-user functionality
      s3 wbinfo: Use uint32_t instead of uint32
      s3 wbinfo: Avoid ADD_TO_ARRAY macro.
      s3 wbinfo: Don't use global_myname()
      s3 wbinfo: Use talloc_strdup instead of SMB_STRDUP
      s3 wbinfo: Explicitly include popt header, remove unused common options.
      s3 wbinfo: Remove unused functions, use C99-types
      libwbclient: Add wbcSidTypeString function.
      s3 wbinfo: use wbcSidTypeString instead of sid_type_lookup
      s3 wbinfo: Only call afs_settoken_str if compiled with WITH_FAKE_KASERVER
      wbinfo: Use one codebase for Samba3 and Samba4.
      s4 winbind: Implement a stubbed out version of WINBINDD_DOMAIN_INFO
      s4 winbind: Silence compile warning by adding new commands to the list
      wbinfo: Reduce test noise in the wbinfo blackbox test
      s4 winbind: Quiet down the WINBINDD_DOMAIN_INFO handler stub warning
      wbinfo: Fix up s3 blackbox test. wbinfo no longer needs a config file.
      s3 merged build: Don't build wbinfo twice.

Kamen Mazdrashki (1):
      Ignoring generated files:

Karolin Seeger (5):
      s3/docs: Fix typo.
      release-scripts: Remove RFCs in source4/.
      s3/docs: Fix typos.
      s3/smbldap: Fix typo in debug message.
      s3-docs: Update build howto.

Kouhei Sutou (1):
      Rename ASN1_BITFIELD to ASN1_BIT_STRING.

Matt Kraai (7):
      s3/docs: Fix typo.
      s3:configure: define _LARGEFILE64_SOURCE on QNX
      do not redefine _INT32
      include unix.h if it's available
      libreplace: set SONAMEFLAG to "-Wl,-soname=" on QNX
      libreplace: undef AI_ADDRCONFIG on QNX 6.3.0 (fix bug #6630)
      Do not redefine strupr

Matthias Dieter Wallnöfer (58):
      Small patch for SPOOLSS pipe
      Fixes for SAMBA3RPC torture test
      Correct the headers of some SAMBA 4 setup python scripts
      Enhancement of "simple ldap map" with "systemFlags" attribute
      SAMDB: Don't check for "sAMAccountName" twice
      Correct some typos in the LDB partition module
      Adds the impersonation level in ntcreatex requests to SAMBA 3 misc torture test
      [SAMBA 4 directory] Adds the object version and "systemFlags" attribute to the display specifiers
      [SAMBA 4 directory] Adds the complete "objectclass path" to our self-created DC object
      [SAMBA 4 directory] Corrects the "systemFlags" attributes
      [SAMBA 4 directory] Changes "forceLogoff" and corrects the "subRefs"
      Cosmetic correction
      [SAMBA 4] Some cosmetic changes for the LDB modules
      Fix typo
      [SAMBA 4 directory] Refactoring and clean up of directory structure
      [SAMBA 4 / NETLOGON] Modify type of SAM contexts
      s4: Patch to implement nested group and privileges
      Adds new error codes (needed for enhancing error messages for SAMBA 4 AD LDAP server)
      s4: Enhances the LDAP server to display error messages like Windows Server
      s4: Adds a small test for the new enhanced error messages from the AD LDAP server
      s4: Correct renamed constants
      Merge branch 'master' of git://git.samba.org/samba
      s3: Remove invalid constant
      netlogon.idl: Removes the form "str[]" for string declarations
      netlogon.idl: Prework to enhance the "netr_LogonGetDomainInformation" call correctly
      s4: Enhancements in the "netr_LogonGetDomainInformations" call
      s4: Torture test for enhancements in "netr_LogonGetDomainInformations" call
      s3/s4: Add new autogenerated files from "make idl_full"
      s4: Change constant to comply with the merged build
      s4: Change my nested groups patch to don't include user's SID itself in the "groupSID"s structure
      s4:torture Remove some unwanted code in the LDAP test - hope this fixes up the test failures
      s4:torture The test logic for the target was wrong. This should correct it.
      s4:ldb Cosmetic corrections in "rdn_name" module
      s4:enableaccount script: Remove a redundant line
      s4: Simplify two lines in the "samdb.py" file (cosmetic)
      s4: Add a new script for setting password properties for a domain in a easier way
      s4:AD LDIFs - More refactoring
      torture/basic: in run_derefopen() the file could have been deleted before the last unlink
      s4:pwsettings script - Fix a small glitch
      s4:operational module - move and enhancements
      s4:samldb module - Remove duplicate line
      s4:test for "primaryGroupToken"
      ldb: Don't break the standalone LDB build (operational module removed)
      s4:operational - Remove some outdated comments
      s4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status results
      s4: Remove obsolete "samdb_password_quality_ok" function (it's just a one-line wrapper)
      s4: Better way to call "dom_sid_to_rid" from ldap.py
      s4: Correct the parameter logic of the "setpassword" script
      s4:ldb - Free the asynchronous result
      s4:samdb python bindings - we don't need the attributes here
      Revert "s4:samdb python bindings - we don't need the attributes here"
      s4:ldb python bindings: Handle the parameters of the connect call in the right way
      s4:pyglue Add a wrapper for loading the correct UTF8 casefolder
      s4:python tools - Centralise the lookups for the default domain (root) in the call "domain_dn" from SamDB
      s4: Major rework of the LDB/SAMDB/IDMAP python bindings
      s4: Fixed the int32 datatype support
      s4: Make the int32 problem more clear - and fix another error
      s4: int32 handling: previous fix was not fully correct

Matthieu Patou (4):
      Fix broken password quality check
      Return infinite time for last last logoff when last logoff = 0
      s4:torture Add test for correct server-side sorting over LDAP
      s4: Create helpers functions related to provision

Michael Adam (109):
      s3:build: link libtalloc statically if using internal libtalloc
      s3:build: check for availability of external libtdb and use it if available
      s3:build: remove LIBTDB_OBJ from TDBTORTURE_OBJ collection
      s3:build: build the tdb tools only when using the internal libtdb
      s3:build: build talloctort only when using the internal liballoc
      s3: fix make test with external libtalloc or libtdb.
      s3:passdb: fix bug #6509: use gid (not uid) cache in fetch_gid_from_cache().
      lib/util: fix building tevent_ntstatus without config.h
      s3:lib/sysquotas: fix usage of SMB_STRUCT_STAT (struct stat_ex).
      s3:fix build of old linux quota system and other unixes' quota implementation
      s3:build: check for external liblua, link lua statically if using internal lib
      lib/util: fix order of includes in tevent_ntstatus.c
      s3:build: remove ../libcli/nbt/tools/nmblookup.o and friends in make clean
      s3:build: remove the libgpo objects upon "make clean"
      Revert "[s3]pidfile_create: use check is_default_dyn_CONFIGFILE() since we have it."
      s3:dbwrap: add a wrapper dbwrap_trans_do()
      s3:dbwrap: add dbwrap_delete_bystring_upper()
      s3:dbwrap: add dbwrap_store_bystring_upper().
      s3:dbwrap: add dbwrap_fetch_bystring_upper().
      s3:dbwrap_util: add my C
      s3:registry: don't store differently cased entries for the same keys.
      s3:registry: add db_context argument to regdb_delete_key_with_prefix()
      s3:registry: add db_context argument to regdb_delete_values()
      s3:registry: add db_context argument to regdb_delete_secdesc()
      s3:registry: add db_context argument to regdb_delete_subkeylist()
      s3:registry: add db_context argument to regdb_delete_key_lists()
      s3:registry: add db_context argument to regdb_store_keys_internal()
      s3:registry: add db_context argument to regdb_fetch_key_internal()
      s3:registry: add db_context argument to scan_parent_subkeys()
      s3:registry: create regdb_fetch_keys_internal() with db_context argument
      s3:registry: rename regdb_store_keys_internal() to regdb_store_keys_internal2()
      s3:registry: create regdb_store_keys_internal() with db_context argument
      s3:registry: don't use exported transaction wrappers in regdb_create_subkey()
      s3:registry: panic upon failed transaction_cancel in regdb_create_subkey()
      s3:registry: in regdb_delete_subkey(), panic if transaction_cancel fails
      s3:registry: in regdb_delete_subkey(), don't use the transaction wrappers.
      s3:registry: don't loop transaction_commit in create_sorted_subkeys() upon error
      s3:registry: fix a comment in create_sorted_subkeys()
      s3:registry: panic upon error at transaction_cancel in create_sorted_subkeys
      s3:registry: add db_context argument to init_registry_key_internal()
      s3:registry: use transaction wrapper in init_registry_key().
      s3:registry: add a regdb_fetch_values_internal() that takes a db_context argument
      s3:registry: add regdb_store_values_internal() that takes a db_context argument
      s3:registry: use transaction wrapper in init_registry_data()
      s3:registry: refactor adding of builtin reg values out
      s3:registry: change regdb_store_keys_internal2() to return WERROR
      s3:registry: unify exit logic and remove leaking to talloc_stack in regdb_store_keys_internal()
      s3:registry: don't leak to talloc_stack in regdb_store_keys_internal2()
      s3:registry: use transaction wrapper in regdb_store_keys_internal().
      s3:registry: use transaction wrapper in regdb_create_subkey()
      s3:registry: add a comment header for the create_subkey set of functions
      s3:registry: add a comment header for the delete_subkey set of commands.
      s3:registry: use transaction wrapper in regdb_delete_subkey().
      s3:registry: restructure logic of create_sorted_subkes() slightly
      s3:registry: use transaction wrapper in create_sorted_subkeys()
      s3:registry: turn regdb_fetch_keys_internal() from int to WERROR return type
      s3:registry: add function regsubkey_ctr_reinit()
      s3:registry: flush the provided subkey_ctr in regdb_fetch_keys_internal()
      s3:registry: db backend: add my C
      s3:dbwrap: fix embarrassing typo :-)
      s3:dbwrap: use the transaction wrapper in dbwrap_trans_delete().
      s3:dbwrap: use the transaction wrapper in dbwrap_trans_store().
      docs: fix typos in the net man page.
      s3:winbind: use transaction wrapper in idmap_tdb2_set_mapping()
      s3:winbind: use transaction wrapper in idmap_tdb2_allocate_id()
      s3:winbind: in idmap_tdb2_id_to_sid(), use transaction wrapped stores.
      s3:winbind: in idmap_tdb2_sid_to_id(), use transaction wrapped stores.
      s3:dbwrap: change dbwrap_change_uint32_atomic() to return NTSTATUS not uint32_t.
      s3:dbwrap: change dbwrap_change_int32_atomic() to return NTSTATUS not int32.
      s3:dbwrap: don't leak in dbwrap_change_uint32_atomic()
      s3:dbwrap: don't leak in dbwrap_change_int32_atomic().
      s3:dbwrap: untangle assignemend and check in dbwrap_change_uint32_atomic()
      s3:dbwrap: untangle assignment and check in dbwrap_change_int32_atomic()
      s3:dbwrap: export logic of dbwrap_change_uint32_atomic into an action function
      s3:dbwrap: add dbwrap_trans_change_uint32_atomic()
      s3:winbind: use transaction in idmap_tdb2_allocate_id_action().
      s3:winbind: fix typo in debugmessage of idmap_tdb
      s3:winbind: fix typo in debug message in idmap_tdb.
      s3:winbind: use transaction store in idmap_tdb_set_hwm() to store new hwm.
      s3:dbwrap: change dbwrap_change_int32_atomic() to take int32_t, not int32
      s3:dbwrap: export logic of dbwrap_change_int32_atomic into an action function
      s3:dbwrap: add dbwrap_trans_change_int32_atomic()
      s3:secrets: use transaction wrapped store in get rand seed.
      s3:passdb: use transaction_wrapped write in tdbsam_new_rid()
      s3: refomat definitions of some generic access rights for better readability
      s3:smbcacls: forbid change of debug level from config file
      gpfs.so: map the file_inherit and dir_inherit flags away for files
      tevent: fix a comment
      s3: fix bug #6650, authentication at member servers when winbindd is not running
      util: fix comment and clarify argument name in DLIST_DEMOTE()
      s3-ldb: update dlinklist.h to match main copy (lib/util/dlinklist.h)
      s4-ldb: update dlinklist.h to match main copy (lib/util/dlinklist.h)
      talloc: add scripts to extract library symbols (exports file) from headers
      talloc: add script to extract signatures from header files.
      talloc: add script/abi_checks.sh. check for abi changes without gcc magic.
      talloc: add a target "abi_checks" to talloc.
      talloc: remove files generated by "make abi_check" in "make clean"
      talloc: run abi_checks as part of "make test"
      talloc: remove talloc_free from the exports
      talloc: move the original abi_checks script to script/abi_checks_gcc.sh
      tdb: add scripts to extract library symbols (exports file) from headers
      tdb: add script to extract signatures from header files.
      tdb: add script/abi_checks.sh. check for abi changes without gcc magic.
      tdb: add a target "abi_checks" to tdb.
      tdb: remove files generated by "make abi_checks" in "make clean".
      tdb: run abi_checks as part of "make test".
      tdb: move the original abi_checks script to script/abi_checks_gcc.sh
      One would expect I could spell my name.
      One would expect I could spell my name...

Nathaniel McCallum (1):
      Two patches which fix issues on cross compiling/building

Olaf Flebbe (1):
      make smbcontrol smbd ping work proper checking for arguments handle short pid_t correctly

Oliver Liebel (2):
      s4:setup Remove extra newlines that break OpenLDAP backend
      s4:provision Rework and further automate setup of OpenLDAP backend

Peter Volkov (1):
      s3: make linking of cifs.upcall --as-needed safe

Ricardo Jorge (2):
      python/loadparm: Get shares listing working.
      param/pyparam: Cope with string list parameters being empty.

Ronnie Sahlberg (1):
      pidl: import a patch to pidl made in the wireshark reporitory.

Rusty Russell (14):
      Make tdb transaction lock recursive (samba version)
      tdb: fix locking error
      If the record is at the end of the database, pretending it has length 1
      realloc() has that horrible overloaded free semantic when size is 0:
      tdb: Revert "lib/tdb: if we know pwrite and pread are thread/fork safe tdb_reopen_all() should be a noop"
      tdb: Reimplementation of Metze's "lib/tdb: if we know pwrite and pread are thread/fork safe tdb_reopen_all() should be a noop".
      tdb: don't alter tdb->flags in tdb_reopen_all()
      s4: make install: prevent overwriting failure
      There is one signedness issue in tdb which prevents traverses of TDB records
      lib/tevent: remove spectacularly complicated manual subtraction
      lib/tdb: don't overwrite TDBs with different version numbers.
      lib/tevent: fix race with signals and tevent_common_add_signal
      lib/tevent: handle tevent_common_add_signal on different event contexts.
      lib/tevent: close pipe_fds on event_context destruction

SATOH Fumiyasu (1):
      Fix bug #6496 - MS-DFS: cannot follow multibyte char link name.

Sam Liddicott (2):
      Upgrade ntvfs_map_*info to ntvfs_map_async_setup/ntvfs_map_async_finish
      s4:client

Shirish Pargaonkar (3):
      mount.cifs: clarify mapchars option
      docs: flesh out options section of umount.cifs manpage
      umount.cifs: do not attempt to update /etc/mtab if it is symbolic link

Simo Sorce (7):
      Restore ABI compatibility for talloc.
      Expose functions need by backend writers
      Sort the signature files
      s3: Fix libtalloc so version
      ldb: cosmetic changes in ldb_dn
      ldb: Depend on libtalloc 2.0.0
      s3-smbpasswd: Fix Bug #6584: allow DOM\user when changing passwords remotely.

Slava Semushin (2):
      lib/util/util_file.c(file_save): fixed file descriptor leak when read(2) fails.
      source4/lib/registry/patchfile.c(reg_diff_load): fixed possible resource leak.

Stefan Metzmacher (223):
      s3:smbd: the SMB2-COMPOUND test shows that the related vs. unrelated flags isn't checked first
      s3:smbd: add smbd_smb2_send_oplock_break()
      s3:smbd: keep a list of outstanding SMB2 requests
      s3:smbd: add support for async interim SMB2 responses and prepare SMB2 cancel
      s3:smbd: send SMB2 interim responses for async calls
      tsocket/bsd: more correctly check if the cached tevent_fd is still valid
      tsocket/bsd: also ask for TEVENT_FD_READ when we want to write into a stream socket
      s3:pdb_ads: we need to make the fd for tldap/tsocket non-blocking
      s3:smbd: remove unused variables passed to parent_dirname()
      s3:onefs_open: remove unused variable passed to parent_dirname()
      s3:util: let parent_dirname() correctly return toplevel filenames
      s3:smbd: allow the offset to the path being 0 in SMB2 create
      s3:smbd: move global notify_changes_by_mid to smbd_server_connection
      s3:smbd: restore the 3.0.x bahavior of send_nt_replies()
      s3:smbd: push nttrans and trans2 responses with no data to the client
      s3:smbd: simplify the notify code a bit and always reply via change_notify_reply() -> send_nt_replies()
      s3:smbd: make change_notify_reply() more generic and hide send_nt_replies() behind a callback
      s3:smbd: add support for SMB2 Notify
      talloc: change TALLOC_MAGIC for version 2.0.0
      s3:smbd: add marshalling layer for SMB2 GetInfo support
      s3:smbd: add marshalling layer for SMB2 SetInfo support
      s3:smbd: add marshalling layer for SMB2 Break support (SMB 2.002 only)
      s3:smbd: add marshalling layer for SMB2 Find (QueryDirectory) support
      s4:libcli: move SMB2 lock flags to smb2_constants.h
      s3:smbd: add marshalling layer for SMB2 Lock support
      s4:heimdal: readd heimdal/lib/asn1/asn1parse.y which was parse.y before the last import
      SMB2-NOTIFY: windows7 uses a different maximum buffer size
      RAW-LOCK: fix the run against w2k3, w2k8, win7rc and samba3/4
      RAW-LOCK: fix a compiler warning and make a global static const
      s3:smbd: cancel all locks that are made before the first failure
      s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't work
      s3:smbd: fix parsing of invalid SMB2 requests.
      s3:smbd: fix parsing of SMB2 Lock requests with lock_count > 1
      s3:smbd: pass down the client pid to smbd_smb2_lock_send()
      s3:smbd: abstract the main locking logic from the LockingAndX parsing
      s3:smbd: make smbd_do_locking() non static
      s3:smbd: add support for SMB2 Lock
      s3:smbd: add missing return after reply_nterror()
      s3:smbd: split out smbd_do_qfilepathinfo() from call_trans2qfilepathinfo()
      s3:smbd: split calculation and mashalling of file index and access_mask
      s3:smbd: make smbd_do_qfilepathinfo() non static for use in SMB2
      s3:smbd: filter out SMB2 specific private query info levels for SMB1
      s3:smbd: add support for marshalling SMB2 FileAllInformation
      s3:smbd: add support for marshalling SMB2 FileFullEaInformation
      s3:smbd: start SMB2 GetInfo support for File*Information levels
      s3:smbd: split out smbd_do_setfilepathinfo() from call_trans2setfilepathinfo()
      s3:smbd: make smbd_do_setfilepathinfo() non static for use in SMB2 SetInfo
      s3:smbd: split out smbd_do_qfsinfo() from call_trans2qfsinfo()
      s3:smbd: make smbd_do_qfsinfo() non static for use in SMB2 GetInfo
      s3:smbd: close_file() handles named pipes just fine, no reason to return NOT_SUPPORTED
      s3:net: Fix Bug #6222. Default to DRSUAPI replication for net rpc vampire keytab
      torture/smb2: fix crash bugs in the new SMB2-DIR tests
      SMB2-CONNECT: unlink the test file at startup
      s4:libcli/smb2: add smb2_transport_credits_set_charge() to change the CreditsCharge value for the next request
      SMB2-GETINFO: test SMB2_ALL_EAS
      s3:make test: smbtorture from s3 needs to take the config file path via the SMB_CONF_PATH envvar
      s3:lib: map ENOSYS to NT_STATUS_NOT_SUPPORTED instead of NT_STATUS_ACCESS_DENIED
      s3:smbd: check quota access against sec_initial_uid() instead of 0
      s3:smbd: return NT_STATUS_INVALID_INFO_CLASS in SMB2 GetInfo
      s3:smbd: implement SMB2 GetInfo with Fs*Information
      s3:smbd: add support for SMB2 SetInfo File*Information
      torture/smb2: add missing new line to the new SMB2-DIR.FILE-INDEX test
      s3:ntvfs/posix: avoid unnesessary talloc_reference()
      s4:ntvfs/ipc: replace unnesessary talloc_reference() by a simple talloc_strdup()
      s4:heimdal_build: try to fix the build on Solaris
      s4:libnet: rename uint => uint32_t because uint is not portable
      s4:winbind: rename uint => uint32_t as uint isn't portable
      s3:tldap: fix the build - a void function should not return a value
      s3:libsmb: we need to include "includes.h" as first header to let code build on all platforms
      s3:smbd: try to fix a compiler warning on i386 : left shift count >= width of type
      tsocket: rename sa_len => sa_socklen, because sa_len is a macro on some platforms
      s4:heimdal_build: try to fix the build on Solaris
      s4:heimdal_build: tell heimdal we have inet_aton()
      tevent: try to fix the build on QNX qnx18 6.4.1 it doesn't have SA_RESTART defined
      s4:heimdal_build: try to fix the build on systems without ifaddrs.h
      s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version
      frsapi.idl: fix some unknown field names
      frsapi.idl: fill the frsapi_WriterCommand() function
      frsrpc.idl: almost complete the idl for the frsrpc_FrsSendCommPkt() function
      frsrpc.idl: make the chunk array in frsrpc_CommPktChunkCtr dynamic
      librpc: fix the merged build of ndr_frsrpc.c
      frsrpc.idl: add definition for frsrpc_FrsStartPromotionParent()
      frstrans.idl: add new DFS-R FrsTransport interface with dummy functions
      frsrpc.idl: add idl for frsrpc_FrsVerifyPromotionParent()
      frsrpc.idl: add definition of frsrpc_FrsNOP()
      s4:libcli/ldap: add support for new Recycle Bin Feature LDAP Controls
      s4:ldb: add support for the new Recycle Bin Feature LDAP controls
      s4:gensec/spengo: make sure we send the blob with the micListMech signature to the peer
      s4:gensec_gssapi: pass the correct oid to the gssapi layer.
      Revert "s4:kerberos Add 'net export keytab' command for wireshark decryption"
      pidl: add support for [string] on fixed size arrays.
      pidl: allow foo being on the wire after [length_is(foo)] uint8 *buffer
      librpc: rerun "make idl_full"
      frstrans.idl: add definition of frstrans_CheckConnectivity()
      frstrans.idl: add definition of frstrans_EstablishConnection()
      frstrans.idl: add definition of frstrans_EstablishSession
      frstrans.idl: add definition of frstrans_RequestUpdates()
      frstrans.idl: add definition of frstrans_RequestVersionVector()
      frstrans.idl: add definition of frstrans_AsyncPoll()
      frstrans.idl: add definition of frstrans_InitializeFileTransferAsync()
      s4:gensec/spnego: only generate the mechListMic when the server expects it
      pidl:Samba4/Python: fix mapType() => mapTypeName()
      s3:rpc_client: add dispatch_send/recv() to struct rpc_pipe_client
      pidl/Samba4.pm: allow an optional prefix passed to DeclLong()
      pidl:Samba3/ClientNDR: allow passing optional variable prefixes to ParseOutputArgument()
      pidl:Samba3/ClientNDR: rename ParseFunction => ParseFunctionSync and add ParseFunction as glue
      pidl:Samba3/ClientNDR: add support tevent_req based _send/recv() client functions
      librpc: rerun "make idl"
      s4:librpc: rename wins.idl => winsif.idl
      winsif.idl: add missing function calls
      winsif.idl: add definition of WinsRecordAction()
      winsif.idl: add definition of winsif_WinsStatus()
      winsif.idl: add definition of winsif_WinsTrigger()
      winsif.idl: add definition of winsif_WinsDoStaticInit()
      winsif.idl: add definition of winsif_WinsDoScavenging()
      winsif.idl: add definition of winsif_WinsGetDbRecs()
      winsif.idl: add definition of winsif_WinsTerm()
      winsif.idl: add definition of winsif_WinsBackup()
      winsif.idl: add definition of winsif_WinsDelDbRecs()
      winsif.idl: add definition of winsif_WinsPullRange()
      winsif.idl: add definition of winsif_WinsSetPriorityClass()
      winsif.idl: add definition of winsif_WinsResetCounters()
      winsif.idl: add definition of winsif_WinsWorkerThreadUpdate()
      winsif.idl: add definition of winsif_WinsGetNameAndAdd()
      winsif.idl: add definition of winsif_WinsGetBrowserNames_Old()
      winsif.idl: add definition of winsif_WinsDeleteWins()
      winsif.idl: add definition of winsif_WinsSetFlags()
      winsif.idl: add definition of winsif_WinsGetBrowserNames()
      winsif.idl: add definition of winsif_WinsGetDbRecsByName()
      winsif.idl: add definition of winsif_WinsStatusNew()
      winsif.idl: add definition of winsif_WinsStatusWHdl()
      winsif.idl: add definition of winsif_WinsDoScanvengingNew()
      .gitignore: ignore more generated files
      s4:auth: make sure we have elements returned at all in authsam_expand_nested_groups()
      util/asn1: fix potential memory leak in asn1_write_OID()
      librpc/ndr_drsuapi: fix a memory leak on ndr_push_drsuapi_DsReplicaOID()
      s4:build: make sure that we regenerate proto headers when source files change
      s4:libnet: use talloc_strdup() instead of talloc_reference()
      s4:tls: avoid using talloc_reference() in tls_init_server()
      s4:tls: avoid using talloc_reference() in tls_init_client()
      s4:ldap_server: the tls code steals the original socket on its own now
      s4:libcli/ldap: the tls code steals the original socket on its own now
      s4:ldap_server: make sure we shutdown the tls socket before stream_terminate_connection() removes the fd event
      s4:heimdal_build: define HEIMDAL_LOCALEDIR
      s3:smbd: don't ignore check_descend in get_dir_entry()
      epmapper.idl: avoid usage of 'pipe', this is a reserved word in IDL
      librpc: rerun 'make idl' after epmapper.idl changes
      librpc: fix callers after epmapper.idl changes
      pidl: fix formatting in idl.yp
      pidl: fix formatting in expr.yp
      pidl: parse idl 'pipe' typedefs, but print out a not supported message for now
      s3:smbd: add a smbd_server_connection pointer to connection_struct
      s3:smbd: conn_free_internal() can be static now
      s3:smbd: add generic smbd_dirptr_get_entry()
      s3:smbd: let get_dir_entry() use smbd_dirptr_get_entry()
      s3:smbd: implement get_lanman2_dir_entry() on top of smbd_dirptr_get_entry()
      s3:smbd: remove dirptr and dirpath from connection_struct
      s3:smbd: move dptr globals into struct smbd_server_connection
      s3:smbd: split the dir entry marshalling into smbd_marshall_dir_entry()
      s4:libcli/raw: also include smb2_constants.h into interfaces.h
      s4:libcli/raw: we don't need to include "smb.h" explicit
      s4:libcli: move SMB2 Find constants to smb2_constants.h
      s4:libcli/smb2: remove unused and redundant SMB2 security flags
      s4:libcli/smb2: move SMB2_GETINFO_* flags into smb2_constants.h
      s3:smbd: rename conn => sconn for smbd_server_connection structs
      s3:smbd: convert '\\' into '/' in SMB2 Create
      s3:winbindd: raise the timeout for lsa_Lookup*() calls from 10 to 35 seconds.
      selftest: fix typo lock => lockdir
      selftest: configure "ncalrpc dir" for the client
      pidl: fix samba3-cli test after the async function were added
      pidl: fix parse_idl test after idl.yp changes
      s3:lib: map ECONNRESET to NT_STATUS_CONNECTION_RESET
      s3:smbd: correctly invalidate vuids when SMB2 is used
      s3:smbd: make sure we don't call conn_free() with a NULL pointer for SMB2
      s3:smbd: avoid 'goto out' in smbd_smb2_create_send()
      s3:smbd: as check_path_syntax() changes the string, we need to copy the string before
      libcli: move some common SMB and SMB2 stuff into libcli/smb/
      libcli/smb: move smb2_create_blob code to libcli/smb/
      s3:smbd: fix parsing of the SMB2 body
      s3:smbd: allow SMB2 Cancel to have the async flag set
      libcli/smb: add smb2_create_blob_find()
      s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbd
      tevent: add some more doxygen comments for tevent_req functions
      tevent: add tevent_req_cancel() infrastructure
      tevent: change version to 0.9.7 after adding tevent_req_cancel infrastructure
      s4:build: require tevent 0.9.7 with tevent_req_cancel()
      s3:smbd: implement SMB2 Cancel correctly.
      s3:smbd: add smbd_notify_cancel_by_smbreq()
      s3:smbd: add support for canceling SMB2 Notify calls.
      s4:librpc/rpc: fix DEBUG() message
      s3:smbd: parse context blobs in SMB2 Create
      s3:smbd: make smbd_check_open_rights() function non-static for use in SMB2
      s3:smbd: implement all SMB2 Create contexts except "ExtA"
      s3:smbd: add a generic smbd_dirptr_lanman2_entry() function
      s3:smbd: store a dirptr on the files_struct for SMB2 Query Directory
      s3:smbd: implement SMB2 Find (Query Directory)
      talloc: let talloc_total_blocks() and talloc_get_size() operate on the null_context
      talloc: report the size of reference handles as 0
      talloc: call return after abort, because an overloaded abort function might not exit
      talloc/testsuite: reset the globals after each subtest
      talloc/testsuite: add infrastructure to test aborts
      talloc/testsuite: report __location__ of testsuite failures
      talloc: let talloc_steal() only generate a warning if it's used with references
      talloc: add talloc_set_log_fn() and talloc_set_log_stderr()
      talloc/testsuite: use talloc_set_log_fn() and log to stdout
      talloc: remove unused build dependecies to samba
      talloc: remove ABI compat functions
      talloc: change version to 2.0.0
      talloc: add defines and functions for TALLOC_MAJOR/MINOR_VERSION
      talloc: update talloc.exports and talloc.signatures
      talloc: add --enable-talloc-compat1 to build a compat library for talloc 1.x.x
      s4:build: require talloc >= 2.0.0
      s4:cmdline: setup talloc log and abort functions
      s3:configure: require talloc >= 2.0.0
      s3:lib: setup talloc log and abort functions
      s4:heimdal_build: lib/hcrypto/evp-aes-cts.o belongs to HEIMDAL_HCRYPTO
      libcli/auth: remember schannel type in netlogon_creds_server_init()
      libcli/auth: remove some useless lines
      libcli/auth: add netlogon_creds_step_crypt() and netlogon_creds_first_step()
      s3:error_map: make NTSTATUS -> errno -> NTSTATUS mapping consistent for NT_STATUS_INVALID_PARAMETER
      s3:streams: check for :$DATA only in the backend (fix bug #6642)
      s3:smbd: add is_fake_file_path() that takes only the raw path as string
      s3:smbd: teach filename_convert() about fake files (2nd fix for bug #6642)

Steve French (1):
      Add missing CreateFile flags to smb.h

Steven Danneman (3):
      s3/winbindd: Remove unnecessary check for NULL SID
      s3/debug: make SPENGO OID list appear under one debug header
      s3/smbd: open the share_info.tdb on startup instead of tconx

Sumit Bose (1):
      remove all '\n' from ldb_debug

Suresh Jayaraman (1):
      doc: clarify that mount.cifs never uses smb.conf

Tim Prouty (62):
      s3: Convert is_visible_file to use talloc_asprintf instead of malloc
      s3: Plumb smb_filename through SMB_VFS_STAT and SMB_VFS_LSTAT
      s3: Change set_ea() and its callers to use smb_filename
      s3 onefs: Plumb smb_filename through onefs createfile path
      s3: Remove get_full_smb_filename() from open_directory()
      s3: simplify some redundant logic in is_ntfs_default_stream_smb_fname()
      s3 file_access: Convert some more functions over to use smb_filneame
      s3: pass a valid stat into file_ntimes()
      s3 docs: Add documentation for 'kerberos method' and 'dedicated keytab file' parameters
      s3: Plumb smb_filename through SMB_VFS_RENAME
      s3 onefs: Fix failure in POSIX smbtorture test
      s3 audit: Remove the usesless static function declarations from the audit modules
      s3 audit: Remove some recently introduced memory leaks in the audit modules
      s3: Plumb smb_filename through SMB_VFS_UNLINK
      s3: Add ability to pass NULL to filename_convert for the char *fname
      s3: Change some filename_convert to pass in NULL for char **fname argument
      s3: Plumb smb_filename around SMB_VFS_CHFLAGS
      s3 sticky write time: Removed unused args and tighten up a function by making an arg const
      s3 catia: Remove pointless VOPs from catia
      s3: Plumb smb_filename through SMB_VFS_NTIMES
      s3 audit: Fix a memory leak
      s3 smb2: Fix unused variable warning
      s3: Update streaminfo implementations now that only base names are passed through the vfs
      s3: Remove unnecessary const qualifiers
      s3: Migrate a few functions in open.c to take smb_filename
      s3 onefs: Fix a few bugs from the smb_filename migration
      s3: convert unix_mode to take an smb_filename
      s3: Plumb smb_filename through dos_mode() and related funtions
      s3: Remove is_ntfs_stream_name() and split_ntfs_stream_name()
      s3: Make some arguments to (parse|unparse)_share_modes() const
      s3: Change the share_mode_lock struct to store a base_name and stream_name
      s3 plumb smb_filename through smb_set_file_allocation_info()
      s3: Prepare open.c to switch fsp_name to an smb_filename struct
      s3: Repace a char * with an smb_filename struct in reply_rmdir
      s3: Fix two arguments that broke when plumbing smb_filneame through dos_mode()
      s3 smb2: Remove unused variable
      lib util: Fix const warning
      s3: Change file_structs to be allocated with talloc instead of malloc
      s3 onefs oplocks: Replace static fstring with talloc'd dbg_ctx()
      s3: Change fsp->fsp_name to be an smb_filename struct!
      s3: Finish plumbing the fsp->fsp_name smb_fname conversion through the modules.
      s3: Move is_ntfs_stream*() to filename.c
      s3: Separate out a new file: filename_utils.c
      s3: Plumb smb_filename through open_fake_file
      s3: Add some asserts to the filename util functions
      s3: Plumb smb_filename through map_open_params_to_ntcreate
      s3: Remove unnecessary fname argument from callers of filename_convert
      s3: Fix RENAME_FLAG_RENAME path to stop calling unix_convert twice
      s3: Remove the now unused fname parameter from filename_convert()
      s3: Remove unnecessary callers of get_full_smb_filename
      s3: plumb smb_filename through some of the trans2 posix_* functions
      s3: Convert some callers of vfs_stat_smb_fname to SMB_VFS_STAT()
      s3: Convert some callers of vfs_lstat_smb_fname to SMB_VFS_LSTAT()
      s3: Change unix_convert to use an smb_filename struct internally
      s3: Allow filename_convert() to pass through unix_convert_flags and let the caller know if the path has a wildcard
      s3: Simplify rename_internals() by passing in smb_filename structs
      s3 onefs: Fix the onefs modules after the big refactoring
      s3: Remove a few callers of get_full_smb_filename()
      s3: Convert a few callers of unix_convert() over to filename_convert()
      s3: Attempt to fix hpuxacl module
      s4 torture: Extend the RAW-RENAME test to more fully test directory renames.
      s3: Fix a bug in renames of directories

Timur I. Bakeyev (1):
      Add ad-schema/*.txt and utils to the installmisc.sh

Volker Lendecke (229):
      Add tldap_context_[gs]etattr
      Make tevent_req_is_ldap_error public
      Add tldap_fetch_rootdse
      Add tiny tldap test
      Fix Coverity IDs 922 and 933
      Add a missing talloc_move() in tldap_search_recv
      talloc_tos() aborts if it can not get a stackframe
      Fix empty lines
      Fix setting passwords in pdb_ads
      Prepare control support
      tldap control support
      Add tldap_entry_has_attrvalue
      Add tldap_supports_control
      Move asn1_blob() to lib/util/asn1.c
      Move asn1_load_nocopy() to lib/util/asn1.c
      Reorganize retrieving errors and server-sent controls
      Add tldap paged searches, together with two helper routines
      Only set the password if there is one
      Reenable the LDAPI socket for the merged build
      Add a \n to a debug message in smbacl4_nfs42win
      Fix a typo in a comment
      Fix some dead code warnings from SUN Studio
      The solaris linker seems to require an extra mention of dependent libs
      s3/lanman: Workaround for KB932762.
      Fix some nonempty blank lines
      Stop listening for inotify data when there's none
      tldap: Don't fire off more than one read_ldap request during searches
      Properly free a downlevel readv request. Metze, please check
      Add tstream_read_packet
      Convert tldap to tstream
      Move read_ldap_done after read_ldap_send
      tldap_msg_received: Properly free the asn1_struct in case of an error
      Add tldap_search_va
      If the connection is down, don't try another write.
      Make pdb_ads survive a restart of Samba4
      Turn the pdb_rid_algorithm into a capabilities call that returns flags
      _lsa_QueryInfoPolicy: Use symbolic info level names
      Fix bug #6431 - local groups from 3.0 setups no longer found.
      Attempt to fix the build
      Test error codes on popular streams
      For non-existent streams we have to return OBJECT_NAME_NOT_FOUND
      Fix two pointless statics
      tldap: Do not do a return before we got the search_result
      Make pdb_ads return an additional flag
      Add pdb_get_domain_info
      Implement QueryInfoPolicy2 similar to s4: Make it the same as QueryInfoPolicy
      Handle LSA_POLICY_INFO_DNS
      Add tldap_pull_guid
      pdb_ads: Fetch the domain GUID
      pdb_ads: Use tldap_fetch_rootdse in pdb_ads_connect
      Fix some warnings
      Add pdb_ads_get_domain_info
      pdb_ads: For cached samu entries, priv is NULL
      Fix some nonempty blank lines
      Actually increase PASSDB_INTERFACE_VERSION to 18 :-)
      Make check_bind_req static to rpc_server/srv_pipe.c
      Introduce null_ndr_syntax_id
      Remove "typedef struct ndr_syntax_id RPC_IFACE;"
      Add const to init_rpc_hdr_ba
      Use null_ndr_syntax_id instead of zeroing null_interface manually
      Attempt to fix the build of vfs_catia.c -- Tim, please check!
      Make escape_ldap_string take a talloc context
      Attempt to fix the build -- jlayton, please check!
      Fix our base64 implementation for blobs of length 4....
      Fix&Run local-gencache
      Quieten events and tldap debug messages
      Return 0 domains from enum_trusteddoms
      TALLOC_FREE(sd) in check_open_rights upon an error
      Create a correct talloc hierarchy in make_sec_acl()
      Create a talloc_stackframe for each file in wildcard unlink
      Attempt to fix the build
      Fix bug 5886
      Replace ASSERTs in gencache with "return false"
      TDB_CONTEXT -> "struct tdb_context"
      Remove gencache_[un]lock_key
      Fix some nonempty blank lines
      Remove gencache_init/shutdown
      Add tdb_data_cmp
      Make gencache more stable
      Consolidate string and data_blob routines in gencache
      Consolidate gencache also every 100 writes in a single process
      3.4 is released...
      Fix a few type errors in VFS modules
      Fix some C++ warnings
      Fix some nonempty blank lines
      Some more VFS type errors
      Fix a few uninitialized variable warnings
      In chain_reply, copy the subrequests' error to the main request
      Fix the chain2 test
      Make the smbd VFS typesafe
      Move the "enum _vfs_op_type" to full_audit
      add my copyright after the VFS rewrite
      First patch for "new VFS" portability
      Fix some nonempty blank lines
      Use a switch statement in charset_name()
      Fix a winbind memleak
      Move 16 bytes from data to r/o text segment
      No explicit initialization necessary for a zero blob
      Remove a pointless static fstring
      Cleanup patch after "struct stat_ex"
      Cleanup patch after "new VFS"
      Fix a 32/64bit stack corruption bug
      Fix a valgrind error in _samr_DeleteUser
      Fix valgrind errors in DeleteDomainGroup and DeleteDomAlias
      Fix a valgrind error in cli_ctemp_done
      Fix some nonempty blank lines
      Fix a valgrind error in winbind
      Fix a typo
      Fix a valgrind error in chain_reply
      Lift the event loop in rpc_api_pipe_req() one level into cli_do_rpc_ndr
      Remove a duplicate prototype
      Fix unqualified "net join"
      shadow_copy2: The system getrealfilename() can't deal with a 0-length fname
      Slightly restructure the async winbind request calling convention
      Provide a mem_ctx for child requests
      Remove a pointless variable
      Fix some nonempty lines
      Rename LOOKUP_NAME_EXPLICIT to LOOKUP_NAME_NO_NSS
      Refactoring: mem_ctx is not needed as an argument to centry_sid
      Fix indentation
      Place a comment correctly
      Some mods for recent coding conventions
      Refactor 9b78af1f: Fix lookupname recursion
      Fix some nonempty blank lines
      Fix some nonempty blank lines
      Fix a typo
      Add some const to winbind_userinfo
      s3:winbind: Add NDR-based parent-child communication to winbind
      s3:winbind: Make wcache_sid_to_name externally visible
      s3:winbind: Add async wb_lookupsid
      s3:winbind: Convert WINBINDD_LOOKUPSID to the new API
      s3:winbind: Remove old version of WINBINDD_PING
      s3:winbind: Make wcache_name_to_sid visible externally
      s3:winbind: Add async wb_lookupname
      s3:winbind: Convert WINBINDD_LOOKUPNAME to the new API
      s3:winbind: Add async wb_sid2uid
      s3:winbind: Convert WINBINDD_SID_TO_UID to the new API
      s3:winbind: Add async wb_sid2gid
      s3:winbind: Convert WINBINDD_SID_TO_GID the new API
      s3:winbind: Add async wb_uid2sid
      s3:winbind: Convert WINBINDD_UID_TO_SID the new API
      s3:winbind: Add async wb_gid2sid
      s3:winbind: Convert WINBINDD_GID_TO_SID the new API
      s3:winbind: Make wcache_query_user externally visible
      s3:winbind: Add async wb_queryuser
      s3:winbind: Make fillup_pw_field publically available
      s3:winbind: Add async wb_getpwsid
      s3:winbind: Convert WINBINDD_GETPWSID to the new API
      s3:winbind: Convert WINBINDD_GETPWNAM to the new API
      s3:winbind: Convert WINBINDD_GETPWUID to the new API
      s3:winbind: Make wcache_lookup_useraliases available publically
      s3:winbind: Make parse_sidlist take a const char *
      s3:winbind: Add async wb_lookupuseraliases
      s3:winbind: Convert WINBINDD_GETSIDALIASES to the new API
      s3:winbind: Make wcache_lookup_usergroups externally visible
      s3:winbind: Add async wb_lookupusergroups
      s3:winbind: Convert WINBINDD_GETUSERDOMGROUPS to the new API
      s3:winbind: Add async wb_gettoken
      s3:winbind: Convert WINBINDD_GETGROUPS to the new API
      Fix some nonempty blank lines
      Make wbinfo also print the members when querying a group
      Implement db_rbt_traverse
      s3:winbind: Simplify _wbint_[GU]id2Sid
      s3:winbind: WINBIND_USERINFO -> wbint_userinfo
      s3:winbind: Add async wb_seqnum
      s3:winbind: Add async wb_seqnums
      s3:winbind: Convert winbindd_show_sequence to the new API
      s3:winbind: Fix a potential segfault in libwbclient
      s3: Add talloc_dict.[ch]
      s3:winbind: Make wcache_lookup_groupmem available publically
      s3:winbind: Add async wb_group_members
      s3:winbind: Add async wb_getgrsid
      s3:winbind: Add const to normalize_name_map
      s3:winbind: Make fill_grent publically available
      s3:winbind: Add winbindd_print_groupmem
      s3:winbind: Convert WINBINDD_GETGRGID to the new API
      s3:winbind: Convert WINBINDD_GETGRNAM to the new API
      s3:winbind: The get[gr|pw]end functions need access to the client state
      Make refusal of SEC_DESC_DACL_PROTECTED configurable
      s3:dsgetdcname: Inline dsgetdcname_cache_refresh
      s3:dsgetdcname: Fix a crash in dsgetdcname
      s3:winbind: Fix the talloc hierarchy in wb_queryuser_done
      s3:winbind: winbindd_dual_ndrcmd should output what it's doing
      s3:winbind: For internal domains it is pointless to connect to a DC
      s3:winbind: Do not drop the first user in sam_query_user_list
      s3:winbind: Even on a domain controller, "our" domain is internal
      s3:winbind: Fallback to the forest root for lookupname
      Do an early TALLOC_FREE
      Add some const to dsgetdcname
      Add a parameter to disable the automatic creation of krb5.conf files
      s3:winbind: Fix Coverity ID 942: Resource Leak
      s3:winbind: Factor out wcache_fetch_seqnum
      s3:winbind: Add a generic cache for NDR based parent-child requests
      s3:winbind: Factor out wcache_store_seqnum()
      s3:winbind: Some calls are not cacheable
      s3:winbind: Remove the manual caching for the async wb_ functions
      s3:winbind: Fix a typo
      s3:winbind: Convert WINBINDD_GETUSERSIDS to the new API
      tevent: Fix a segfault upon the first signal
      s3:winbind: Rename wbint_GroupMember to wbint_Principal
      s3:winbind: Rename wbint_GroupMembers to wbint_Principals
      s3:winbind: Fix a typo
      s3:winbind: Fix a bug found by RPC-SAMR
      s3:winbind: Make wb_seqnums.c update the winbind cache seqnums
      s3:winbind: simplify wb_seqnums_done a bit
      s3:winbind: Add async query_user_list
      s3:winbind: Add async fill_pwent
      s3:winbind: Add async next_pwent
      s3:winbind: Convert the GETPWENT routines to the new API
      s3:winbind: Add an async dsgetdcname call
      s3:winbind: Convert winbindd_dsgetdcname to the new API
      s3:winbind: Add async wb_dsgetdcname
      s3:winbind: Convert the GETDCNAME routines to the new API
      w3:winbind: Convert WINBINDD_LOOKUPRIDS to the new API
      s3:winbind: Add async QueryGroupList
      s3:winbind: Add async wb_next_grent
      s3:winbind: Fix a typo
      s3:winbind: Add some missing error checks
      s3:winbind: Add a comment about fill_grent_mem_domusers...
      s3:winbind: Convert the getgrent functions to the new API
      s3:winbind: add a fake NDR winbind cache validator
      s3:nsstest: Fix a very confusing behaviour in nsstest
      s3:winbind: Convert WINBINDD_LIST_USERS to the new API
      s3:winbind: Convert WINBINDD_LIST_GROUPS to the new API
      w3:winbind: Convert WINBINDD_ALLOCATE_UID to the new API
      w3:winbind: Convert WINBINDD_ALLOCATE_GID to the new API
      s3:winbind: Fix bug 5626
      s3:libwbclient: Fix bug 6349, initialize domain info struct
      s3:libsmb: Attempt to fix bug 6665

Yannick Bergeron (1):
      Increase the max_grp value to 128 (AIX NGROUPS_MAX value) instead of 32 to allow AIX to call sys_getgrouplist only once

Zach Loafman (1):
      Allow for name array strings that don't end in a slash

tprouty (3):
      s3 audit: Change create_file in full_audit to print whether a directory or file was requested
      s3: Allow full_audit to play nice with smbd if it's using syslog
      s3 onefs: Canonicalize the ACL in the correct order

-----------------------------------------------------------------------


-- 
Samba Shared Repository


More information about the samba-cvs mailing list