[SCM] Samba Shared Repository - annotated tag release-alpha-4-0-0alpha14 created

Jelmer Vernooij jelmer at samba.org
Thu Dec 23 18:07:31 MST 2010

The annotated tag, release-alpha-4-0-0alpha14 has been created
        at  6dbc515d963039e0f11fe0109d36e2a017c18275 (tag)
   tagging  0eded28c2371adb356fc6c48185455fd6257c0c5 (commit)
  replaces  release-4-0-0alpha13
 tagged by  Jelmer Vernooij
        on  Fri Dec 24 02:05:59 2010 +0100

- Log -----------------------------------------------------------------
Tag 4.0.0alpha14.
Version: GnuPG v1.4.10 (GNU/Linux)


Abhidnya P Chirmule (3):
      File BirthTime test
      File winattr test
      s3: Add a vfs_time_audit module

Anatoliy Atanasov (19):
      s4/fsmo: Naming master support added
      s4/drs: Added the rest of the enum drsuapi_DsNameFormat values
      s4/drs: use type enum drsuapi_DsNameFormat in DsCrackNames code
      s4/fsmo: Create separate function for retrieving fsmo role dn and owner dn.
      s4/dcdiag: Handle ListRoles command for dcdiag:KnowsOfRoleHolders test
      s4/dsdb:kcc: cleanup and improve readability
      s4/eventlog6: Add idl for EventLog6 RPC
      s4/eventlog6: Add endpoint server for EventLog6 RPC
      s4/eventlog6: Build and hook EventLog6 RPC endpont mapper and idl
      s4/eventlog6: Add dummy implementation for calls 0x5 and 0xB
      s4/irpc: Add function to add security token to the binding handle
      s4/irpc: Add security token to the binding handle when doing irp call forwarding
      s4/test: Added test for simple bind with machine account
      s4/auth: Add logon_parameters to authenticate_username_pw
      s4/syntax: Add tests for DN+String and DN+Binary
      s4/test: Add bind.py to make test
      s4/test: Expand BindTest
      s4/ldap: ldap_syntaxes.py cleanup
      s4/operational: Fix swapped parameters for ldb_msg_copy_attr

Andreas Schneider (8):
      s3-waf: Link smbd against RPCECHO.
      s3-spoolss: Fixed print_access_check server_info.
      s3-spoolss: Fixed print job access.
      s3-winbind: Fixed the build of idmap_rid.
      s3-rpc_server: Make auth_serversupplied_info const.
      s3-rpc_server: Normalize rpc_pipe_open_interface pipe name.
      s4-gensec: Add dependency on com_err to GENSEC_KRB5.
      s3-winbind: Fixed init order.

Andrew Bartlett (216):
      s4-winbind Add a proxy method to update DNS records with a read-write DC
      libcli/ldap Add const to ldap_encode_ndr_dom_sid()
      s3: Replace sid_binstring and sid_guidstring with PIDL-based alternatives
      s3-uuid Remove unused smb_uuid_pack()
      s3-libads call common GUID_from_ndr_blob()
      s3-lib/util Remove unused smb_uuid_unpack()
      s4-kerberos Fix kerberos_enctype_bitmap_to_enctypes()
      s4-libnet Remove libnet_samdump_keytab() and net samdump keytab
      s4-kerberos Move 'set key into keytab' code out of credentials.
      s4-libnet_join Use header constant for 'all encryption types' in msDS-SupportedEncryptionTypes
      s4-selftest Run slow tests less often
      selftest Don't run 'speed' tests for very long
      s4-kerberos Rework keytab handling to export servicePrincipalName entries
      s4-kerberos Don't segfault if the password isn't specified in keytab generation
      s4-dsdb Fix segfault in error case in rootdse module
      s4-kdc Use msDS-SecondaryKrbTgtNumber to fill in the full KVNO
      s4-kdc Add function to determine if a hdb entry is a RODC
      s4-dsdb Make samdb_reference_dn() use dsdb_search() and DSDB_SEARCH_ONE_ONLY
      s4-dsdb Add ldb_reset_err_string() when we set error codes.
      s4-kdc Add common setup, handle RODC setup case
      heimdal Add support for extracting a particular KVNO from the database
      heimdal Add an error code for use in the RODC
      s4-kdc Handle the case where we may be given a ticket from an RODC in db layer
      heimdal Fix DNS name qualification to not mangle IP addresses
      heimdal Use a seperate krb5_auth_context for the delegated credentials
      s4-kdc Ensure that an RODC may act as a server (needed to fill
      heimdal: added verbose logging of hemimdal crypto errors
      heimdal use returned server entry from HDB to compare realms
      s4-auth Allocate domain SIDs under the sids array, not server_info
      s4-auth Add make_server_info_pac() to include 'resource domain' groups
      s4-kdc Rework 'allowed encryption types' handling in the KDC
      s4-kerberos Don't regenerate key values for each alias in keytab
      s4-gensec Always honour the set server principal
      s4-heimdal_build fix up build after heimdal import
      s4-heimdal We don't need HDBDIR any more
      s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0272ecbe56e60c567af5c)
      Add new files for sha512 support
      s4-kdc Fix up after import of new lorikeet-heimdal
      s4-kdc Remove special case kerberos restriction in the KDC
      s4-libnet_vampire use a linked list to handle schema objects pending conversion
      s4-kerberos Remove unsued variable
      s4-kerberos Remove unused parameter
      s4-param Refactor secrets code to not require an event context.
      s4-credentials Add explicit event context handling to Kerberos calls (only)
      s4-smbd Remove event_context_set_default()
      s4-tevent Remove event_contex_find() and event_context_set_default()
      s4-ldb Don't use talloc_autofree_context() in ldb
      s4-ldb Allow a NULL event context in samba_ldb_init()
      ldb The use of a private event context isn't a hack
      lib/torture:  Add function to clean up the output directory
      s4:smbtorture Create a new random output directory each time, and delete it
      libcli/security Move most of security_token.c to common code.
      lib/debug Add DEBUGC and DEBUGADDC as dummies
      libcli/security Add debug class to security_token_debug() et al
      s4-libcli/security Use seperate subsystem for session related functions
      s4-credentials Allocate ldb result on correct memory context
      libcli/security Use common security.h
      libcli/security Provide a common, top level libcli/security/security.h
      s3 Replace is_sid_in_token() with security_token_has_sid() from common code
      s3-auth use security_token_has_sid() from the common code
      s3-auth Use security_token_debug() from common code
      s3-util_nttoken.c Also copy the rights_mask when copying a security_token
      s3-acl Merge source4-supported privileges into se_access_check
      s3-acl Use uint32_t for counting the ACEs
      s4-acl Merge sec_access_check() with se_access_check() from source3/
      libcli/security Move source3/lib/util_seaccess.c into the common code
      libcli/security Define traditional constants in terms of IDL macros
      libcli/auth Merge source4/libcli/security and util_sid.c into the common code
      libcli/security Use static SIDs rather than parsing from strings
      Revert "s4:dsdb - make the RELAX control private"
      dsdb simple_ldap_map depends on LDBSAMBA
      s4-provision Use --ldap-backend-nosync rather than just --nosync
      s4-openldap-backend Don't set 'dbnosync' on cn=config
      ldb Ensure we mark ongoing LDAP requests as PENDING
      s4-selftest Make GDB_PROVISION work again
      s4-ldb Add LDB_REQ_SET_LOCATION to help track handler use
      s4-provision Remove serverdn parameter from Schema()
      s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
      s4-gensec Don't upgrade all DIGEST-MD5 connections to seal
      s4-gensec Don't give more to sasl_encode() than it will permit
      s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.
      s4-dsdb Allow LDB_ERR_INVALID_DN_SYNTAX in dsdb_load_partition_usn
      s4-dsdb Add module to send only 'simple' DNs to OpenLDAP backends
      s4-dsdb Reset the error string after 'expected' errors.
      s3-waf Use LIBSECRUITY subsystem from the common wscript_build
      libcli/ldap Don't try and encode a control with a NULL OID
      s4-dsdb extended_dn_out: Move lazy dereference control creation to lazy-init
      libcli/security Remove unused sec_acl_equal()
      s3-smbd Remove manual override of DEBUGELVEL during exit
      librpc Make ndrdump use printf() rather than having to mess with DEBUG()
      auth/credentials Give a sensible behaviour for resetting the krb5 context
      lib/util Remove setup_logging_stdout()
      s4-torture Remove torture/locktest2.c (no longer compiled and unused)
      lib/debug Use vdprintf rather than manually allocate
      s3-debug Impove setup_logging() to specify logging to stderr
      s3-debug Remove 'AllowDebugChange' and use lp_set_cmdline() instead
      s3-debug Remove last direct assignements to DEBUGLEVEL
      s3-debug Convert from x_file to real file descriptors.
      s3-debug Move 'load_case_tables()' before lp_set_cmdline() and popt calls
      s3-debug Clarify the handling of invalid state.fd values in debug.c
      debug Explain the behaviour of setup_logging() more clearly
      s3-libsmbclient-examples Add tests for debug behaviour.
      s3-libsmbclient Add comments to describe the behaviour of DEBUG()
      s3-libsmbclient Don't store 'debug_stderr' on the libsmbclient context
      s3-param Fix up lp_set_cmdline() not to re-store cmdline options on each reload
      heimdal Add handling for PAC signatures over all encryption types
      s4-selftest Allow weak crypto so we can test DES-only behaviour.
      s4-torture Add tests for DES-only accounts PAC behaviour/validation.
      s4-process_model Fix valgrind-found use of un-initialised variable
      s4-selftest Run RPC-PAC against all the DC environments.
      s4-dsdb Fix urgent_replication test not to set an invalid userAccountControl
      s4-ldap_server Don't DEBUG() at level 2 every time a caller disconnects
      s4-kerberos Mention the remote address we fail to contact the KDC on
      s4-selftest fix indentation
      s4-dsdb Explain why we may not use the GC name in some situations.
      s4-auth Supply more useful error messages on Kerberos failure
      heimdal Add clock-skew handling to DCE-style GSSAPI
      s4-dsdb Return an error if we can't convert UTF16MUNGED -> UTF8
      s4-dsdb Convert new krbtgt_xxx password into UTF16
      s4-dsdb Remove incorrectly declared ** variable used as *.
      s4-provision UTF16 encode the password in sam.ldb, not secrets.ldb
      heimdal Don't dereference NULL in error verify_checksum error path
      heimdal Return HDB_ERR_NOT_FOUND_HERE to the caller
      s4-kdc Return HDB_ERR_NOT_FOUND_HERE on un-revealed accounts on an RODC
      s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f45533d07f2a2cbbd3224f29)
      Add attribute macros for Heimdal to use
      heimdal regenate lex and yacc files
      heimdal Extra files required for merge up to current heimdal
      s4-kdc Remove use of heimdal private headers in kpasswd server.
      s4-kdc update startup routines after heimdal update
      auth/gensec Handle incorrect username or password in Kerberos client code
      s4-kdc Fix realm handling in our KDC
      heimdal Fix handling of backwards cross-realm detection for Samba4
      s4-gensec Indicate if GENSEC is in client or server mode in the debug
      heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out
      s4-kdc Don't always regenerate the PAC
      s4-kdc Don't regenerate the PAC for cross-realm tickets
      s4-kdc Add 'flags' parameter to db fetch calls
      s4-kdc use 'flags' to only create the 'admin data' elements when requested
      s4-kdc Fix the realm handling again, this time pay attention to the flags
      heimdal Build ticket with the canonical server name
      s4-test_kinit Add tests for lowercase realm combinations
      s4-ldif_handlers Add handler for printing supplementalCredentials
      samba-tool pwsettings Allow setting 'store cleartext'
      samba-tool Add test for --store-plaintext
      s4-kdc Rework supported encryption type logic to match Microsoft
      wintest Force krb5.conf for BIND so we use the one generated for this test
      wintest Set the virtual machine IP to match it's dynamic IP, but don't use DHCP
      wintest Allow substitute to cope with objects like pexpect.EOF
      wintest example configuration file for a KVM based wintest
      wintest Explian that this is my KVM/libvirt configuration
      wintest Improve wintest's handling of IP addresses and add more auto-setup
      wintest Evolve wintest to handle it's own BIND nameserver
      s4-setup correct the require BIND version for Dynamic DNS
      wintest Don't connect to localhost or unqualified hostname, bind interface only
      lib/debug Add clarifying comments
      s3-netapi Add libnetapi_net_init(), don't double-init common Samba subsystems
      s3-libnetapi Add function header comments
      s3-libnetapi Load case tables earlier
      s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics().
      s4-dsdb Add 'block anonymous' checks to the rootdse module
      s4-dsdb Remove rootDSE and anonymous checks from acl_read
      s4-objectclass Use a specific local variable name, not 'value'
      s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP)
      s3-param Fix lp_set_cmdline() to set the flag on alias values too
      s4-librpc Handle all types of GUID in the GUID() initialiser
      s4-smb_server Return why the ntvfs_connect() failed.
      wintest Add more VMs and correct titles
      wintest Add automatic dcpromo is the host isn't a DC yet
      wintest Fix case of BASEDN variables
      wintest Add a function to shut down all the managed VMs at the start
      wintest Set WIN_LCREALM and WIN_BASEDN automatically
      wintest Make the new --vms option default to running all tests.
      s4-samba-tool Show when we have created the user successfully
      wintest Allow 'samba-tool newuser' to run a few times waiting for the RID Set
      wintest Add more retries and fix up RODC handling after auto-dcpromo
      wintest Another way to work out if a Windows machine is a DC
      wintest Wipe the BIND data directory just before we restart bind
      s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4617f8759b9df1a5e935c)
      wintest Move stopping of BIND into a new step
      s4-provision Add an invalid names check for 'domain == netbiosname'
      s4-provision Always run slaptest to convert the config file
      libcli/auth bring ADS_IGNORE_PRINCIPAL in common
      s4-spnego use "not_defined_in_RFC4178 at please_ignore" if no principal specified
      s4-param Allow +foo syntax in smb.conf list parsing
      s4-client Use NTLMv2 by default in the Samba4 client.
      s4-tests Workaround new default of 'client ntlmv2 auth = yes' in tests
      s4-lsa Implement kerberos ticket life policy
      s4-spnego Match Windows 2008, and no longer supply a name in the CIFS Negprot
      wintest Remove the password expiry as the first step
      s3-libads Default to NOT using the server-supplied principal from SPNEGO
      s3-smbd Don't send SPNEGO principal (rfc4178 hint) by default
      s3-client Use NTLMv2 by default in the Samba client
      s3-docs Explain change to NTLMv2 by default in the client
      s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'
      s3-libsmb Don't ever ask for machine$ principals as a target.
      s3-winbind Don't send the LM password to the server, ever
      s3-winbind Improve memory handling in NTLMv2-backend plaintext authentication
      wintest Share more of the S4 test code with the s3 test
      s3-net Allow 'net ads dns register' to take an optional hostname argument
      wintest More work to make test-s3.py work
      s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like it
      s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like it
      wintest flush DNS on Windows clients to improve reliablity
      s3-libsmb Improve error message when denying LM encryption
      wintest Add testing of kerberos connections to Windows members of an AD domain
      libcli/security Add sid_blob_parse() to directly parse a binary SID blob
      s4-dsdb Use sid_blob_parse()
      s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later
      lib/ldb Remove talloc_free() that causes double-free in callbacks.
      Revert "s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later"
      s4-auth Remove obsolete comment
      s4-auth Remove event context from privilage database handling
      s4-auth rework session_info handling not to require an auth context
      s4-auth Remove duplicate copies of session_info creation code
      s4-auth Ensure that we always copy across domain groups

Andrew Tridgell (595):
      idl: build python interfaces for winbind and idmap IDL
      s4-pyrpc: allow python to access irpc interfaces
      s4-devel: developer script for adding DNS entries via netlogon RPC
      s4-pydsdb: don't force am_rodc unless it is set by caller
      s4-pydsdb: added am_rodc() method on samdb
      s4-finddcs: added some debug messages on failure
      s4-rodc: added RODC DNS update support to samba_dnsupdate
      s4-cldap: improved debug msgs in finddcs_cldap()
      s4-libnet: use the right domain name in libnet_lookup
      s4-dns: added --all-names option to samba_dnsupdate
      s4-dns: fixed the dns_domain_info_type for netlogon DNS calls
      s4-rodc: override client site from cldap response
      s4-rootdse: mark registered controls as non-critical
      s4-kcc: a bit more debug info on repsFrom creation
      s4-rodc: fixed repsFrom store on RODC
      s4-pyrpc: fixed build on python 2.4
      s4-drepl: use the partition UDV and hwm for extended getncchanges ops
      s4-kcc: pass the service context into the kcc connection code
      s4-kcc: added service->am_rodc
      s4-gensec: fixed a GSSAPI SASL negotiation bug
      s4-gensec: prevent a double free in the error path of GSSAPI auth
      s4-drs: we don't need to decode to utf8 in python dcerpc strings any more
      s4-gensec: fixed a client side bug in GENSEC/SASL/SSF negotiation
      s4-kcc: the kcc should not be setting the repsTo attribute
      lib-subunit: fixed build on systems without subunit devel library
      torture: fixed a valgrind error in SMB2-CREATE
      s4-repl: use dreplsrv_partition_source_dsa_by_guid to find source dsa
      s4-repl: force on WRIT_REP when we are a writable replica
      s4-repl: use namingContexts from rootDSE to initialise partition list
      s4-pycredentials: avoid a tallloc_free on ref
      s4-repl: don't store repsFrom on DNs other than NC heads
      s4-finddcs: allow override of server IP address
      s4-libnet: added server_address option in libnet context
      s4-pynet: added server keyword to Net() initialisation
      s4-net: added --ipaddress option to net commands
      s4-repl: make getncchanges a bit less verbose
      ldb: added request location tracking
      s4-dsdb: added tagging of requests in dsdb modules
      ldb: mark the location of a lot more ldb requests
      script: added autobuild.py automatic build test script
      autobuild: added --rebase option
      autobuild: added a EDITOR script to mark successful autobuilds
      autobuild: added --rebase-master and --push-master
      autobuild: added --fix-whitespace option
      autobuild: enable ccache
      s4-provision: switch to dns-HOSTNAME instead of dns
      s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account only
      autobuild: added --retry option
      s4-spn: don't try to do SPN updates as a RODC
      s4-drs: use the system sam_ctx for updaterefs
      idl-pac: add a decoder for the pac info ctr
      s3-selftest: added samba3.posix_s3.rap.printing as a knownfail
      autobuild: fixed detection of master changes
      s4-auth: fixed the SID list for DCs in the PAC
      autobuild: exit immediately if no changes from master
      autobuild: use killbysubdir if available
      s4-provision: fixed the generation of the krb5.conf for vampire
      s4-dns: use the generated krb5.conf in samba_dnsupdate
      s4-gensec: fixed a valgrind error in gensec
      s4-drs: fixed comment in getncchanges code
      s4-ildap: fixed a talloc_steal with references error
      heimdal: avoid DNS search domain expansion
      s4-dns: avoid search domains expansion in DNS resolver
      s4-drs: make getncchanges debug less verbose
      s4-kcc: don't print "Testing kcctpl_create_intersite_connections"
      s4-ildap: two more places that need talloc_reparent()
      s4-auth: removed unused variable dom_sid
      s4-dsdb: added samdb_find_site_for_computer() and samdb_find_ntdsguid_for_computer()
      s4-kcc: fixed a incorrect context to kcctpl_get_all_bridgehead_dcs
      s4-ldb: removed an unused variable
      s4-kdc: added ifdef guards in kdc.h
      pidl: added ifdef guards around ndr headers
      s4-dns: added --update-list option to samba_dnsupdate
      s4-netlogon: added RODC DNS update call fwded to dnsupdate task
      s4-dns: implemented RODC DNS update in dns update task
      s4-provision: fixed the authority response for our SOA record
      filter-subunit: added a --fail-immediately option
      s4-selftest: added a --fail-immediately option to s4 test
      waf: we don't need the preprocessor recursion limit any more
      s4-drs: moved the drs_ObjectIdentifier handling to dsdb_dn.c
      s4-drs: use drs_ObjectIdentifier_*() calls in getncchanges
      ldb-tdb: ignore failure to register control on rootdse
      s4-drs: added support for DRSUAPI_EXOP_REPL_OBJ
      selftest: enable FAIL_IMMEDIATELY in autobuild make test
      autobuild: use git notes for autobuild messages
      ldb-dn: don't crash on NULL in ldb_binary_encode_string()
      s4-sam: fixed termination of krbtgt_attrs (comma and NULL)
      heimdal: fixed timegm UTC/GMT bug
      s4-kdc: RODC DCs should be able to produce forwardable tickets
      s4-provision: simplify our generated krb5.conf
      s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
      s4-drsutils: expose DsBind() call in drs_utils.py
      s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call
      libds: added more UF_ -> ACB_ flags mappings
      s4-sam: added DOMAIN_RID_ENTERPRISE_READONLY_DCS for RODCs in the PAC
      util: added BINARY_ARRAY_SEARCH_V()
      s4-drs: added drs_security_access_check_nc_root()
      s4-drs: implement PAS checks and access checks for getncchanges
      s4-devel: added new options to getncchanges script
      s4-samldb: also set a password on the krbtgt_NNNN account
      s4-dns: send A record updates via TKEY
      idl-drsuapi: fixed another replica_flags that should use the bitmap
      s4-kcc: fixed the replica_flags in repsFrom in the kcc
      s4-drepl: fixed the checking of replica_flags in the drepl server
      s4-drepl: don't call UpdateRefs on a RODC
      s4-drs: added support for level 10 of getncchanges
      autobuild: fixed exit status
      autobuild: added much better email reporting
      s4-dsdb: silence the domainFunctionality not setup warning
      s4-libnet: wipe the old keytab when exporting
      s4-drs: put the GCSPN flag into the repsTo if requested
      s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
      s4-provision: wipe the old keytabs when provisioning
      autobuild: push of ref/notes/commits isn't allowed in master
      selftest: fixed a selftest error on sn
      s4-spn: don't try and send an empty SPN list
      autobuild: fixed the --tail option for new log locations
      s3-selftest: added samba3.posix_s3.rpc.spoolss.printer to knownfail
      s4-dsdb: fail the transaction instead of asserting on error
      s4-rpmd: fixed a use after realloc bug
      autobuild: cwd is needed on all command types
      autobuild: fixed the tuples in the retry_task
      autobuild: disable the subuit changes for now - they break error checking
      autobuild: revert a bit more of the subunit changes
      s4-auth: fixed a vagrind error when creating keytabs
      autobuild: fixed tuple count for retry
      s4-kcc: remove stale repsTo entries in the KCC
      s4-drs: fixed comparison login in replicated renames
      s4-dsdb: added dsdb_search_by_dn_guid()
      s4-rpc: added target_principal binding handle option
      s4-repl: use the GC principal name for DRS replication connection
      autobuild: include autobuild.log in logs.tar.gz
      autobuild: show top commit in emails
      script: added bisect-test.py git bisect script
      bisect: more bisection options
      s4-selftest: fixed up exit codes on signals for make test
      s4-selftest: added --screen option for test
      s4-server: exit with status 127 on SIGTERM
      s4-ldif: get rid of the ndr_pull_error message on startup
      s4-test: silence the Failed to chown message in make test
      s4-test: silence a tap2subunit error
      s4-selftest: silence warnings about bind chown
      s4-selftest: support 'make testenv SCREEN=1'
      s4-kcc: silence "Testing kcctpl_create_intersite_connections" message
      autobuild: override the editor when marking the commit
      waf: workaround for the 'make install' breakage
      s4-test: changed the gentest test to use a fixed seed.
      waf: fixed the problem with com_err on Ubuntu 9.04
      s4-heimdal: disable using the system compile_et for now
      waf: update to waf version 1.5.19
      waf: fixed some python3.x portability issues
      autobuild: only add autobuild.log if it exists
      s3-spoolss: added another intermittent failure to knownfail
      waf: allow for commands like "make bin/smbtorture"
      s3-build: use the simpler "make bin/smbtorture" for s4 torture
      maintainers: added initial MAINTAINERS.txt
      maintainers: delete the old MAINTAINERS file
      waf: fixed exit status of test suites
      script: improvements to bisect-test.py
      s4: mark us as not supporting python3 yet
      autobuild: add an extra blank line before the autobuild markers
      autobuild: send email failure if rebase fails
      ldb: when running from build directory, use the build modules
      s4-dynconfig: use the build modules when running from build directory
      autobuild: do make install after make test
      s4: don't rebuild all of heimdal when dynconfig options change
      s4-torture: fixed uninitialised variable error
      s4-torture: zero all of trans before the test starts
      s4-ldb: added an optional operator_fn in the schema syntax
      s4-ldb: implement an operator_fn for the ldb-samba syntaxes
      s4-ldb: use operator_fn syntax function in ldb_match code
      s4-schema: don't name variables after standard libc functions
      s4-ldb: take advantage of ldb_match_msg_error() in more places
      ldb: raise minor version number for new ldb_msg_match_error() function
      s4: show samba version in bin/samba -b
      security: ensure the merge of libcli/security doesn't change s3 behaviour
      s4-heimdal: fixed some trailing commas in heimdal build
      s4-waf: automatically remove stale C and header files
      s4-net: fix the dependence on command line ordering
      s4-finddcs: better debug messages to help track down DNS problems
      script: the --tests option has been replaced by --test-command
      s4-net: exit with a failure when a command is unknown
      s4-test: fixed test_kinit.sh time command test
      s4-test: fixed a typo in test_kinit.sh
      replace: cope with systems that have fdatasync(), but don't have the prototype
      readline: fixed the test for history_list()
      waf: automap shared library names from .so to the right extension
      waf: don't save deps on install
      waf: put -Wl,-no-undefined only in the linker flags, not when compiling C
      s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()
      s4-ldb: added --relax cmdline option
      s4-ldb: cope with NULL oid in controls
      s4-dsdb: filter unregistered controls in the rootdse module
      s4-ldap: mark all ldap:// requests as untrusted
      s4-ldb: increase minor version for 2 new functions
      selftest: terminate selftest if we can't setup the environment
      s4-dsdb: register the DCPROMO_OID control with the rootdse
      s4-mailslot: fixed handling of random collision in temporary mailslot names
      autobuild: create an autobuild.pid file
      waf: added --show-deps and --show-duplicates
      waf: rework expand_subsystem_deps()
      waf: allows libraries to be marked as private_library=True
      waf: fixed expansion of direct_objects and direct_libs
      libcli: make the LIBSECURITY subsystem into a private library
      s4-dsdb: make SAMDB_COMMON into a private library
      waf: re-work the module alias code
      wrapper: make socket_wrapper, uid_wrapper and nss_wrapper private libs
      libcli: make LIBCLI_NBT a private library
      s4-ndr: make NDR_TABLE a private library
      replace: make libreplace a private library
      s4-auth: make auth a private library
      s4-libcli: make LIBCLI_LDAP a private library
      waf: cope with libraries with a specified version number
      build: subunit and popt need to be marked as private libraries
      s4-build: fixed some formatting
      waf: added the concept of a grouping_library
      waf: replace the is_bundled option with private_library
      s4-waf: removed dependencies on missing subsystems
      waf-build: create a samba_sockets grouping library
      waf-build: create a NDR_SAMBA grouping library
      s4-build: make LIBSAMBA-NET a private library
      s4-waf: make NDR_STANDARD a grouping library and add NDR_SAMBA4
      s4-dsdb: moved a bunch of fuctions from schema/schema_info_attr.c to samdb/ldb_modules/schema_util.c
      s4-lib: make SMBPASSWD a private library
      s4-libcli: make LIBSAMBA-ERRORS a private library
      lib: add UTIL_TEVENT to samba_sockets grouping library
      nsswitch: make LIBWBCLIENT a private library
      nsswitch: make LIBWINBIND-CLIENT a private library
      s4-dsdb: make ldb_password_hash depend on hdb not HEIMDAL_HDB_KEYS
      s4-kdc: make DB_GLUE a private library
      s4-events: make LIBEVENTS a private library
      s4-socket: make LIBNETIF a private library
      s4-libcli: make LIBSECURITY_SESSION a private library
      waf: prevent the global deps list creating depenency loops
      s4-waf: removed the XATTR and SASL aliases
      s4-waf: don't depend directly on python modules
      waf: raise an error on a dependency on a python module
      s3-waf: mark some libraries as private
      s4-param: added a libshares grouping library
      s4-python: added a samba_python grouping library
      librpc: added NDR_XATTR and NDR_UNIXINFO to the NDR_SAMBA grouping library
      waf: added pyext option to SAMBA_LIBRARY()
      lib: make WRAP_XATTR a private library
      librpc: added RPC_NDR_SAMBA grouping library
      s4-ldb: make pyldb_util a private library
      librpc: added a few more NDR_* targets to NDR_SAMBA
      s4-waf: removed the dependency loop between ntvfs and dcerpc_server
      waf: show duplicate objects in python modules as well as libraries
      s4-python: python_samba needs pyext
      s4-rpc_server: split out DCERPC_SHARE as a separate subsystem
      s4-events: LIBEVENTS depends on LIBSAMBA-UTIL
      s4-dsdb: fixed depenencies for -no-undefined
      libcli: LIBSECURITY depends on NDR_SECURITY
      s4-librpc: fixed depenencies for libcli/security
      waf: fixed the handling of -Wl,-no-undefined
      waf-python: make the pyext flag add the pyembed features for libraries
      waf: loosen the restriction on depending on python libs
      s4-ldb: make ldb_options_find() public
      s4-dsdb: force LDB_ERR_NO_SUCH_ATTRIBUTE on missing schemaInfo
      waf: check the linker accepts a set of ldflags before using them
      waf: RPC_NDR_WINBIND is samba4 specific
      autobuild: don't cleanup the pid file within the retry loop
      s4-waf: we don't need the smbtorture.static for s3 any more
      s3-waf: fixed waf configure for recent changes
      s3-waf: fixed paths in s3 waf build for rpc_server
      waf: moved the -Wl,-no-undefined flags to source4 and ldb
      waf: quote subsystem names to make them clearer
      s3-waf: fixed the s3 waf build
      waf: sped up the project rules checking
      s4-ldb: create a private library ldb-cmdline
      replace: create a private replace-test library
      s4-heimdal: fixed the use of error_message() in heimdal
      s4-heimdal: removed the use of signal.c from roken
      s4-kdc: create a 'pac' private grouping library
      waf: added suncc_wrap
      waf: added env.DEVELOPER_MODE flag
      waf: display the paths in library loops
      waf: separate out get_tgt_list()
      waf: cope with rules with no inputs
      waf: use Utils.WafError() instead of raising an AssertionError
      waf: build all libraries after all object files
      waf: added --symbol-check option
      waf: don't auto-depend on subsystems
      waf: cope with subsystems with no static modules
      waf: give a better error on a bad grouping library
      waf: save the samba_deps_extended
      s4-smbd: don't initialise process models more than once
      s4-smbd: make our process models into real modules
      s4-torture: simplify the depenencies for TORTURE_DRS
      s4-modules: remove LD_SAMBA_MODULE_PATH
      s4-rpc: split the dcesrv reply code out of dcerpc_server
      zlib: use the real library name 'z' instead of ZLIB
      s4-ldbwrap: split ldb-wrap out from the LDBSAMBA subsystem
      s4-ldb: add explicit depenencies on ldb library in ldb modules
      s4-credentials: make a private library from CREDENTIALS subsystem
      s4-auth: make KERBEROS subsystem into authkrb5 private library
      s4-tdb: make tdb-wrap into a private library
      s4-replace: make libreplace a private shared lib in s4
      s4-cluster: make cluster a private shared lib
      s4-dns: make the dns update task an external module
      s4-cmdline: make cmdline-credentials a private library
      s4-ndr: make ndr-table a subsystem
      s4-build: removed some unnecessary dependencies
      waf: get rid of target aliases in wafsamba
      s4-test: don't override modules dir
      s4-waf: added a lexyacc.sh script that manually rebuilds the heimdal parsers
      s4-heimdal: lex_err_message() should not be static
      waf: fixed building of non-shared binaries that contain modules
      s4-smbd: leave the single process model as internal
      s4-smbd: initialise process models in smbtorture before use
      s4-auth: added a dependency on com_err
      s4-server: avoid using environ as it is not portable
      waf: added module_init_name parameter to SAMBA_MODULE()
      s4-ldb: support a new type of ldb module loading
      s4-ldb: convert the ildap module to the new type of ldb module
      s4-ldb: convert the openldap ldb backend to the new style of module
      s4-dsdb: convert the extended_dn_out module to the new ldb module style
      s4-dsdb: convert the simple_ldap_map module to the new module style
      waf: added automatic prototyping of static module init functions
      s4-process_model: use the static module prototyping
      s4-ldb: convert the rest of the ldb modules to the new style
      s4-ldb: removed the old ldb module loading style
      s4-test: we don't need to set LDB_MODULES_PATH any more
      s4-dsdb: convert the rest of the ldb modules to the new module type
      waf: removed the module aliases code
      s4-modules: get rid of the remaining static prototypes for modules
      s4-ldb: it is not an error for the modules directory to not exist
      s4-ldb: added an override flag to ldb_register_backend()
      s4-ldb: added support for general ldb hooks in modules
      s4-ldb: moved the ldb_ildap backend into lib/ldb-samba
      s4-ldb: added samba_extensions ldb module
      s4-ldb: added ldb command line hook support
      s4-ldb: convert existing ldb tools to use new command line hooks
      s4-ldb: fixed build of oLschema2ldif
      s4-ldb: fixed build of paged searches
      s4-ldb: added support for ldb module version checking
      s4-ldb: enable ldb module version checking
      s4-ldb: enable version checking in dsdb ldb modules
      s4-ldb: use ldb_set_modules_dir() to load additional ldb modules
      s4-ldb: removed ldb_includes.h
      s4-ldb: expose some more ldb module functions
      s4-dsdb: removed the use of ldb_private.h from s4
      s4-ldb: give the user a hint as to what may be wrong
      waf: fixed wildcard build
      waf: rerun deps calculation on LDFLAGS or CFLAGS change
      waf: fixed wildcard build for full paths
      s4-build: use -Wl,--as-needed if supported
      waf: split pkgconfig logic into a separate module
      waf: ensure pkgconfig files depend on the prefix
      waf: added reconfigure targets to our libraries
      s4-ldb: make ldbtest depend on ldb
      waf: more agressively expand subsystem syslib deps
      s4-test: if using a system version of ldb, override the ldb modules path
      s4-ldb: fixed sorting of module names
      s4-server: cleanup allocation of process models
      build: a more portable way of finding waf in makefiles
      debug: fixed default debug settings
      s4-auth: unconditionally set previous_ev
      s4-test: fixed quoting in deletetest.py
      Move the checking of single valued attributes back into the tdb backend.
      s4-ldb: honor controls on search in ldbedit
      s4-ldb: don't load modules from the same directory twice
      s4-dsdb: use LDB_FLAG_MOD_REPLACE for isDeleted
      compression: fixed an uninitialised data but in lzxpress
      compression: added a simple lzxpress test
      s4: don't run etags over .inst files
      pidl: use a union assignment instead of memmove
      s4-pydsdb: added DsReplicaAttribute()
      s4-pydrs: added rodc option to python drs replication
      s4-join: added DC join to the python join code
      s4: net -> samba-tool
      s4-ldb: show the reason for module initialization failure
      s4-drs: reduce the memory usage of the getncchanges server
      s4-ldb: much more memory efficient msg filtering
      s4-cldap: print all the DNS servers found
      s4-join: don't print all the NDR packets by default
      s4-join: fixed secure_channel_type
      samba-tool: deprecate samba-tool vampire command
      s4-join: switch over to the new DC join in make test
      s4-join: fixed SPNs, invocationId and dnshostname and python join
      s4-cldap: fixed debug message to match content
      s4-dsdb: give the DN on a shema attribute failure
      s4-drs: allow override of the replica_flags
      s4-join: modify join behaviour according to domain level
      s4-pydrs: validate the DsGetNCChanges response
      s4-ldb: better error message when we try to register a module twice
      waf: prevent us from modifying non-install libs during make install
      waf: fixed tabs/spaces for python3.0
      s4-dns: ensure we get the right case on the grant rule for administrator
      waf: fixed the names of the installed libraries after the last change
      waf: go back to the previous method of handling .inst. rules
      s4-ldb: don't give an error if a module is already registered
      s4-debug: lowered the debug level of some unimportant messages
      s4-repl: fixed replication notifications to RODCs
      s4-drs: allow bypass of writespn checking for some SPNs
      heimdal: fixed a shadowed variable warning for error_message
      s4-drs: reduce verbosity of dreplsrv_out_connection_attach
      s4-test: make sure the selftest prefix exists
      s4-join: raise mininum password length to 32 in new join code
      s4: point to the wiki howto for s4
      s4-server: move the creation of the IPC$ share into ntvfs
      s4-loadparm: fixed dumping of non-default parms with testparm
      s4-join: use the command line loadparm in provision during a join
      s4-test: use IPC$ instead of ADMIN$ for srvsvc NetShareGetInfo test
      s4-devel: useful script for testing join with empty smb.conf
      s4-provision: include command line provision options in the generated smb.conf
      s4-loadparm: fix the FLAG_DEFAULT settings on specially handled parameters
      s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h
      s4-kdc: we don't need the special include handling now
      s4-kdc: split the kdc process return into a tri-state
      s4-kdc: added proxying of kdc requests for RODCs
      s4-test: we need to import testtools before subunit/python
      s4-drs: fixed a crash in writspn
      s4-auth: fixed crash in krb5 auth
      s4-auth: fixed infinite loop in krb5 auth
      samba-tool: fixed crash in "samba-tool drs showrepl"
      s4-server: make server sockets a child of the task context
      s4-kdc: if "bind interfaces only" is false, then also listen on wildcard
      s4-dns: fixed registration of multiple IPs in samba_dnsupdate
      s4-dns: added --fail-immediately option to samba_dnsupdate
      waf: fixed configure again on RHEL5
      s4-devel: a script to test the Samba4 HOWTO
      s4-join: not all versions of w2003 have msDS-SupportedEncryptionTypes
      waf: added --git-local-changes configure option
      s4-eventlog: fixed dcerpc handle return
      s4-spoolss: fixed warning in call to torture_warning()
      s4-test: fixes for test-howto.py
      s4-loadparm: fixed a memory leak in handle_realm()
      s4-loadparm: set debuglevel and logfile in tables
      s4-join: enable NDR printing at debug levels >= 5
      s4-join: show a reasonable error on DsAddEntry() failing
      s4-join: fixed join to w2k3
      s4-test: added testing of w2k3 DC join to test-howto.py
      s4-dns: catch more expections in samba_dnsupdate
      s4-provision: add log messages about IP lookup
      s4-provision: use the command line lp in provision
      s4-gensec: zero the gssapi_state
      s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY
      s4-test: updates to test-howto.py
      heimdal: added HEIM_BASE_NON_ATOMIC option
      s4-heimdal: ask for non-atomic heimdal
      s4-provision: don't try to autodetect xattr is posix:eadb is set
      developer: only do the C++ reserved name checking on Linux
      s4-provision: setup posix:eadb using lp.set()
      s4-provision: don't test for xattrs if posix:eadb is set
      s4-doserr: telling our users to "see Windows help" doesn't seem right
      s4-kcc: fixed result_last_attempt in showrepl
      s4-repl: ensure we don't starve pending replication ops
      s4-repl: save the result of the last replication in repsFrom/repsTo
      s4-repl: removed the syncall_workaround code
      s4-wintest: added wintest.py library
      s4-test: rename scripting/devel/howto to scripting/devel/wintest
      s4-test: added greater control over tests to run
      s4-dns: added support for --fail-immediately for RODC netlogon dns updates
      s4-spnupdate: only enable NDR print at log level above 5
      s4-test: use --fail-immediately for samba_dnsupdate testing
      s4-test: added --rebase and --clean options
      s4-wintest: remove files in var/ when reprovisioning
      s4-drs: fixed a typo
      s4-join: initially disable the machine account
      s4-rodc: enable the DRS_GET_ALL_GROUP_MEMBERSHIP flag for RODC replication
      s4-wintest: reliability and usability improvements
      talloc: added TALLOC_FREE_FILL environment variable
      wintest: moved to top level
      wintest: rename test-howto.py to test-s4-howto.py
      wintest: move conf files to conf/
      wintest: added del_files, write_file and casefold
      wintest: the start of a S3 testing script for wintest
      s4-rpc: make rpc connect less verbose
      waf: fixed the build with a space in the source directory
      pidl: fixed call to cpp with a space in the directory name
      heimdal: fixed the waf build with a space in the directory name
      s4-ldb: fixed the build with a space in the ldb modules directory name
      s4-ldb: added an environment varibale LDB_WARN_UNINDEXED
      wintest: tidyups and new conf variables
      s4-kcc: disable the NDR printing of DRS getinfo requests
      s4-dynconfig: override more paths when running from the build directory
      s3-torture: remove the merged_build tests for building smbtorture4
      s4-devel: we don't need to override these scripts now
      wintest: fixed interface handling and DNS forwarding
      wintest: remove reliance on hostname in /etc/hosts
      wintest: fixed cleanup of /etc/resolv.conf
      wintest: added an IPv6 address, and use fully qualified hostname
      s3-test: try to avoid a problem of CFLAGS propogating to the torture build
      s4-provision: don't try to look for an IPv6 address when not specified
      wintest: make IPv6 optional in wintest
      wintest: fixed "rndc command" option in provision
      wintest: do an initial replication of CN=Configuration to transfer dnsHostname
      s4-provision: fixed eadb automatic and manual setting in provision
      s4-kcc: fixed valgrind errors in drs replicaInfo server side
      wintest: handle missing firewall commands
      wintest: avoid adding a blank line to resolv.conf on each run
      wintest: cope with VMs sometimes not rebooting
      s4-libnet: use the full DNS domain for CLDAP lookups if possible
      s4-samba-tool: fixed "-k no" for disabling kerberos auth
      libds: added mS-DS-ReplicatesNCReason flags
      s4-pydsdb: use cpp macro to simplify flags definitions
      s4-drs: allow DrsReplicaGetInfo as a DC
      s4-pyglue: expose the remaining NTTIME functions from glue
      s4-samba-tool: added python implementation of samba-tool drs commands
      s4-samba-tool: switched over to python version of samba-tool drs
      s4-samba-tool: removed old C implementation of samba-tool drs
      s4-drs: fixed credit for C version
      s4-samba-tool: support help, and show description of commands
      s4-pydsdb: added GPO policy flags
      s4-samba-tool: started on gpo subcommands in python
      s4-pydsdb: two more GPO related flags
      s4-dsdb: give full error message for operational failures
      s4-gpo: started on samba-tool gpo list command
      s4-loadparm: added loadparm_init_global()
      s4-loadparm: use loadparm_init_global() instead of loadparm_init()
      s4-pyglue: added get_debug_level() method
      s4-ldapcmp: fixed exception handling
      s4-ldapcmp: make ldapcmp a samba-tool command
      s4-join: fixed exception handling in join command
      s4-samba-tool: improved exception handling in samba-tool
      s4-samba-tool: fixed ldb exception handling in domainlevel command
      s4-samba-tool: fixed exception handling in subcommands
      s4-repl_schema: fixed ldb exception handling
      s4-samdb: give a better exception if multiple users match in password change
      wintest: cope with the heimdal version of kinit
      s4-dns: catch all DNS exceptions in samba_dnsupdate
      heimdal: fix for w2000 from lha
      wintest: added --vms option
      wintest: make expect calls case insensitive by default
      s4-provision: fixed check for missing msDS-SupportedEncryptionTypes
      s4-build: added a 'make help' target
      waf: added a help target for the other waf builds
      waf: use Logs.warn() instead of print() in the symbol check code
      waf: less verbose message for failing to resolve a syslib path
      wintest: fixed casefold handling in expect calls
      s4-provision: remove the disabled bit in the dns-$HOSTNAME account
      wintest: wait for the windows DC to register its DNS name
      s4-drs: the options attribute is optional on NTDSDSA objects
      wintest: cope with delays in w2k3 starting its DRS server
      wintest: fixed formatting of wintest in emacs python mode
      wintest: we don't need the WIN_BASEDN vars any more
      wintest: make command matching case insensitive by default
      wintest: cope with w2k3 form of dcdiag output
      s4-drs: cope with invalid NTDS DNs from DsReplicaInfo()
      s4-ldap: removed an incorrect talloc_move()
      wintest: added README
      wintest: put most of the main program login in wintest.py
      wintest: autodetect if named supports tkey-gssapi-keytab
      s4-dns: a dlz module for bind9
      s4-dns: added flags support for dlz_bind9
      s4-dns: support Samba command line options to the dlz_bind.so module
      s4-dns: return the correct TTL
      samba-tools: export doesn't need any credentials
      samba-tools: more reasonable defaults for samba-tool commands
      wintest: use --add-ref for RODC replication
      s4-ldb: ensure ldb_register_samba_handlers() is not done twice
      s4-dsdb: register samba handlers in dsdb module
      s4-dns: allow a remote ldap server to be used with dlz_bind9
      s4-ldb: use RTLD_DEEPBIND if available for ldb modules
      s4-dns: use ldb hooks for samba extensions in dlz_bind9
      s4-waf: get the version number right on private libraries
      s4-dns: dlz_bind9 doesn't need to link to gensec any more
      waf: added configure test for -Wl,--version-script
      waf: use -Wl,--version-script if available
      s4-heimdal: enable symbol versioning in heimdal
      s3-waf: fixed version number handling
      waf: make all generators depend on their rules
      waf: added -Wmissing-prototypes to build
      waf: support @LIB_RPATH@ in pc files
      s4-ldb: added @LIB_RPATH@ to the ldb pc file
      waf: added --disable-symbol-versions configure option
      s4-pkgconfig: add @LIB_RPATH@ to our link flags
      waf-abi: auto-generate per-symbol versions from ABI files
      waf: make mkdir_p on a empty string not recurse forever
      waf: use vscripts for our private libraries too
      waf: don't use symbol versioning on our modules
      waf: add a dependency between the library and its vscript
      waf: fixed path to abi_directory
      waf: remove the restriction that private libraries must not have a vnum
      s3-vfstest: fixed paths in vfstest
      waf: the libXX.inst.so file also depends on the vscript
      waf: fixed re-running of build rules
      s4-dns: added basic DLZ writeable support to dlz_bind9
      s4-dns: implemented parsing and storing of DNS records from bind
      dnsp: fixed parsing of dns_name structures
      s4-dns: fixed a crash bug in dlz_bind9 code
      dns: auto-calculate the wDataLength field in DNS records
      dns: fixed the padding for dnsp_name fields in LDAP
      s4-dns: disable segfault handling in dlz_bind9
      s4-provision: removed an incorrect debug message
      s4-dns: return the local hostname as the SOA authority
      dns: cope with trailing '.' in dns_name
      s4-dns: fixed name comparison in bind9 module
      s4-dns: set dwSerial and dwFlags
      dns: fixed dns record format

André Hentschel (1):
      net: Add and fix some German translation

Arnaud Faucher (2):
      heimdal: Don't depend on compile_asn1 and et_compile when using system versions.
      Avoid the use of PyAPI_DATA, which is for internal Python API's.

Bjoern Baumbach (1):
      Make sure that user exists after running add user script before adding sam account.

Björn JACKE (1):
      autobuild: perfer to use git mail address in autobuild comment

Björn Jacke (39):
      s3/vfs_scannedonly: use smb_msleep instead of nanosleep
      s3: use nsec_time_diff instead of TspecDiff
      s3: remove TspecDiff macro, we can use the shared nsec_time_diff function
      s3/s4: merge msleep and smb_msleep
      s3: remove TvalDiff macro, we can use the shared usec_time_diff function
      Ñ•3: remove smb_msleep prototype from here
      s3: fix order of arguments in nsec_time_diff call
      lib/util: usec_time_diff takes arguments the other way round than TvalDiff did
      s3/winbind: remove unused winbindd_check_cache_size
      s3: don't build krb5 locator plugin if we don't build winbind
      tevent: include libreplace heade before tevent header
      libreplace: fix endless strerror_r has been redefined warnings on AIX
      s3: fix tdbdump build on Solaris and other boxes
      s3/configure: fix typo and warning
      s3/vfs_time_audit: use monotonic clock for time deltas
      s3/time_audit: fix a change that was just for debuggin purposeѕ
      s3/doc: add missing documentation for vfs_time_audit
      s3/vfs_tsmsm: fix debug output for large files
      s3/vfs_tsmsm: remove unneeded cast to off_t
      Ñ•3/configue: set Tru64 cc's PIC switch right (none)
      s3/smbtorture: use $MAKE to build to make sure we use the make that makes our build
      librpc: fix builds without IPv6 suport (HP-UX 11.00)
      s3/configure: fix GNU ld version detection with old gcc releases
      s4/waf: add intl dependency for nss_winnbind
      waf/buildtools: use /bin/sh instead of /bin/bash and put ^ in quotes
      waf/buildtools: remove more bash shebangs and fix a == to =
      smbprinting: fix wrong == in shell tests
      fix Ñ•ome == to correct shell test in commented stuff
      tests: avoid bash in shebang and fix wrong "==" in test
      s3/selftest: add some FIXMEs
      s4/ldb: fix shell syntax error in test script
      s4/scripting/ktpass: make shell code portable and eliminate another bash requirement
      s3/net: don't use external "date" to make "net time set" more portable
      s3/net: tz argument should be NULL of course
      s3: add FILE_ATTRIBUTE_SPARSE to get_stat_dos_flags
      s3: remove set_sparse_flag
      s3/vfs_gpfs: map SPARSE attribute to/from WINATTRs, too
      s3:smbd: add file_set_sparse() function
      s3:smbd: implement FSCTL_SET_SPARSE more correctly

Brad Hards (2):
      s4-auth Fix typos in samba4 auth code
      Update dcerpc_server.pc library name to match reality.

Christian Ambach (8):
      s3:vfs:syncops make it possible to specify syncops:onclose per share
      s3:vfs:syncops add option to disable module per share
      s3:vfs:gpfs convert sharemodes/leases parameter
      s3:gpfs: Add support for the gpfs_ftruncate call
      s3:winbind add timeouts to winbind cache
      s3:winbind add wcache_tdc_fetch_domainbysid
      s3:idmap: add a new ID mapping module autorid
      s3:winbind correct a copy&paste error

David Disseldorp (2):
      s3-spoolss: fix spoolss GetPrinterData behaviour
      s3-printing: fix printer_list_traverse()

Gregor Beck (11):
      s3-docs: document net registry
      s3-lib: add cbuf, a talloced character buffer
      s3-lib: add srprs, primitives to build simple recursive parsers
      s3-registry: handle registration entries (.reg) files
      s3-net: let rpccli_winreg_Connect optionally return WERROR
      s3-net: add command registry import
      s3-net: add command registry export
      s3-net: add command registry convert
      s3-net: add command rpc registry export
      s3-net: add command rpc registry import
      s3:registry: proposed aix build fix for reg_parse_internal

Günther Deschner (312):
      s4-smbtorture: fix winreg querymultiplevalues NDR test warning.
      testprogs: skip two tests in spoolss tester.
      libnetapi: deal with NULL data in I_NetLogonControl2().
      s3-libnetapi: support NETLOGON_CONTROL_FORCE_DNS_REG in I_NetLogonControl().
      s3-nltest: add dsregdns command to nltest.
      s3-rpcclient: add some winreg commands.
      s4-smbtorture: add LOCAL-NDR-NTLMSSP.
      s3-waf: add rpcclient to the waf build.
      s3-registry: add reg_querymultiplevalues to reg_api matching table.
      s3-registry: move regf based reg_api calls into own file.
      s3-waf: fix the build after reg_api changes.
      s3-waf: fix the file locations of gen_ndr'ed files.
      s4-smbtorture: add test_SetServiceObjectSecurity() to RPC-SVCCTL.
      s3-waf: add libnetapi
      s3-waf: add net.
      s3-waf: fix the build after registry changes.
      s4-smbtorture: add NetRemoteTOD libnetapi torture test.
      s3-build: only include async headers where needed.
      s3-build: only include ctdbd_conn.h where needed.
      s3-build: only include smbldap.h where needed.
      libcli: add dom_sid_compare_domain()
      s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.
      s3-util: use shared dom_sid_dup.
      s3-nmbd: move SYNC_DNS to nmbd.h
      s3-build: try to fix the non-ldap build.
      lib/tdb: fix c++ build warning in tdb_header_hash().
      s4-smbtorture: print SVCCTL security descriptor in test_QueryServiceObjectSecurity().
      s3-libnetapi: Fix Bug #7665, memory leak in netapi connection manager.
      s3-winbindd: another attempt to fix the non-ldap build.
      s3-waf: remove reg_util_legacy from waf build as well.
      s3-libgpo: fix the build of scripts client side extension.
      s3-lsa: Fix sid in DEBUG in_lsa_EnumAccountRights.
      s4-smbtorture: print out membership in RPC-SPOOLSS-ACCESS.
      s3-waf: fix the build.
      s3-registry: fix some c++ build warnings.
      s3-waf: add libsmbclient.
      s3-waf: reconcile objects to old make-based build.
      s3-build: strip down dependencies of smbta-util.
      s3-build: fix the build of test_lp_load.
      s3-build: fix the build of split_tokens.
      s3-waf: add all remaining binaries from the make build.
      s3-waf: add libsmbsharemodes.so.
      s3-waf: rework libnetapi to have no unresolved symbols.
      waf: move majority of shared NDR_ subsystems to main wscript_build.
      s3-waf: fix LOCALEDIR usage.
      waf: fix generated nbt.h path, should fix s4 install.
      s3-waf: recurse into main wscript_build from main librpc directory.
      s3-waf: move epmapper client to LIBMSRPC.
      s3-build: move epmapper client to LIBMSRPC.
      s3-waf: convert LIBMSRPC_GEN into a subsystem.
      s4-waf: move two more NDR_ subsystems to main directory.
      s3-waf: recurse into ../lib/crypto.
      s3-waf: add libaddns.so.
      s3-waf: convert smbd into a subsystem.
      s3-waf: convert LIBADS into a subsystem.
      s3-waf: convert LIBADS_SERVER into a subsystem.
      s3-waf: convert LIBADS_PRINTER into a subsystem.
      s4-waf: add NDR_LSARPC and NDR_SAMR.
      s3-waf: first run in using NDR_ subsystems (mostly from shared directory).
      s3-dsgetdcname: always pass in messaging context.
      s3-waf: fix the build after rpc_server crypto changes.
      s3-waf: convert LIBMSRPC into a subsystem.
      s4-waf: move the RPC_NDR subsystems to main librpc wscript_build.
      s3-waf: fix the build of nsstest with --enable-nss-wrapper.
      s3-waf: remove duplicate CONFIGFILE from dynconfig.py which caused sysconfigdir
      s3-waf: add more diroptions.
      s3-waf: fix the build.
      s3-waf: add check for seteuid method.
      s3-waf: add wscript_build to s3 librpc dir for NDR_ subsystems.
      s3-waf: add autogen-waf.sh to source3.
      s3-waf: add RPC_NDR_WBINT to librpc/wscript_build.
      s3-waf: convert LOCKING into a subsystem.
      s3-waf: let winbind depend on SRV_NDR_WBINT and RPCCLI_NDR_WBINT.
      s3-waf: convert AFS_SETTOKEN and AFS into subsystems.
      s3-waf: convert PROFILE into a subsystem.
      s3-waf: convert READLINE into a subsystem.
      s3-waf: convert PASSWD_UTIL into a subsystem.
      s3-waf: convert LIBNET et al into subsystems.
      s4-waf: rename subsystem NDR_LSAPRC to NDR_LSA.
      s4-waf: add NDR_EVENTLOG.
      s3-waf: convert LIBEVENTLOG into a subsystem.
      s3-waf: install header files for our libraries.
      s3-waf: fix libnetapi and libaddns unresolved symbols.
      s3-waf: convert DISPLAY_SEC into a subsystem.
      s3-waf: add missing idmap module objectfiles.
      s3-waf: fix debug2html.
      s3-vfs: fix the build of nfs4_acls.c
      s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems.
      s3-waf: convert LIBGPO into a subsystem.
      s3-waf: convert AUTH into subsystem.
      s3-waf: convert PDB into subsystem.
      s3-waf: convert IDMAP into subsystem.
      s3-waf: convert CHARSET into a subsystem.
      s3-waf: convert PERFCOUNT into a subsystem.
      s3-waf: convert GPEXT into a subsystem.
      s3-waf: convert VFS into a subsystem.
      s3-waf: add some module specific functions for s3 waf build.
      s3-waf: move VFS subsystem to modules/wscript_build.
      s3-waf: support --with-acl-support, at least for posix acls.
      s3-waf: move auth subsystem to auth/wscript_build.
      s3-waf: move pdb subsystem to pdb/wscript_build.
      s3-waf: move idmap subsystem to winbindd/wscript_build.
      s3-waf: move charset subsystem to modules/wscript_build.
      s3-waf: move perfcount subsystem to modules/wscript_build.
      s3-waf: move gpext subsystem to libgpo/gpext/wscript_build.
      s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.
      s3-waf: add missing IDMAP modules.
      waf: add delimiter argument to TO_LIST.
      s3-waf: rework static and shared list handling a little.
      s3-waf: add two more REGF based subsystems.
      s3-waf: add PRINTING subsystems.
      s3-waf: move SERVICES into a subsystem.
      s4-smbtorture: remove unneeded dcerpc_mgmt alias.
      s4-waf: remove NDR-SRVSVC alias.
      waf: add more NDR subsystems for shared IDL files.
      s3-waf: NDR_SRVSVC is defined now from the main librpc wscript_build.
      s3-waf: link PReg parser only in registry client side extension.
      s3-waf: fix dependencies to NDR_XATTR.
      s3-waf: add NDR_PERFCOUNT subsystem.
      s4-smbtorture: rework test_EnumPrintProcessors to let it test more combinations.
      s3-spoolss: Fix _spoolss_EnumPrintProcessors error handling
      s4-smbtorture: rework spoolss_EnumPrintProcDataTypes test.
      s3-spoolss: Fix _spoolss_EnumPrintProcDataTypes error handling
      samr: add three new ACB flags to IDL.
      s3-printing: remove unused old structs.
      s3-auth_util: make sure the system server info actually contains S-1-5-18.
      s3-waf: add pam_smbpass.
      s3-waf: fix dependencies in most of our module subsystems.
      s3-waf: add vfs_linux_xfs_sgid to the list of default shared modules.
      s3-waf: add AUTH_SCRIPT module to AUTH subsystem (which is build as shared
      s3-waf: add in a little hack to deal with the ECHO rpc module for non-developer builds.
      s3-printing: skip metadata entry when traversing printerlist.
      s3-waf: add vlp binary.
      s3-waf: clean up socket-wrapper and nss-wrapper a little.
      s3-waf: add basic make test infrastructure, not able to test yet.
      s4-smbtorture: add new EnumPrinters test to test printername/servername
      s3-spoolss: Fix servername/printername handling which turns out to be very important to get right.
      spoolss: use the correct flags for spoolss_PrinterInfo1 struct.
      s3-spoolss: make sure to exit early and with the appropriate error code in
      s3-spoolss: dont overwrite location change notify.
      s3-spoolss: make sure we dont crash on NULL setprinter level2 elements as seen from win7.
      s3-net: make sure we dont crash when publishing a single printer.
      s3-net: better handle obscure 0x80070002 error reply when trying to update an
      s3-spoolss: fix do_drv_upgrade_printer() which must have been broken since the
      samba: share select wrappers.
      s3-readline: move cmd_history to smbclient, the only user.
      samba: share readline wrappers among all buildsystems.
      s3-dcerpc: no point for printing NDR twice for internal pipes in log level 10.
      testprogs: print architecture used in win32 spoolss testsuite.
      s3-spoolss: Strip off ", DrvConvert" and ",LocalOnly" in OpenPrinterEx as seen from Win7 clients.
      spoolss: fill in spoolss_AddPortEx IDL.
      spoolss: fill in spoolss_SetPort IDL.
      spoolss: fill in spoolss_DeletePort IDL.
      s3-waf: add RPCCLI_WINREG subsystem.
      s3-waf: convert NSS_INFO into a subsystem.
      s3-libndr: handle NDR_ERR_IPV6ADDRESS case in ndr_errstr().
      s3-reg_parse: fix uninitialized variable in srprs_key().
      libndr: fix "excess elements in struct initializer" warning.
      s4-selftest: move spoolss to skip list.
      s3-selftest: enable smb2 torture tests against samba3.
      s3-waf: use more of the NDR_ subsystems.
      s3-waf: add slightly different mkbuildoptions awk script for waf.
      Revert "libndr: fix "excess elements in struct initializer" warning."
      selftest: make it more obvious we only expect the printjob tests to fail.
      s3-samr: fix _samr_QueryGroupMember().
      s4-samr: Fix dcesrv_samr_QueryGroupMember.
      samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray.
      s3-docs: fix typo in "add port command" smb.conf manpage.
      s4-smbtorture: re-arrange openprinterex tests.
      s3-rpcclient: add openprinter_ex command.
      s3-spoolss: make it possible to have and announce a [prnproc$] share on the printserver.
      s3-waf: slowly getting modules to match how they look like in old build.
      s4-smbtorture: add test for openprinter printername pattern.
      s3-spoolss: fix set_printer_hnd_name() to match torture test.
      s3-spoolss: convert open_printer_hnd to return WERROR.
      s3-spoolss: let set_printer_hnd_name return WERROR.
      s3-spoolss: add more userlevel info validation to _spoolss_OpenPrinterEx.
      pidl: fix minor typo in s3 server generation.
      s3-waf: fix pdb modules build.
      s3-waf: fix the build of smbtorture.
      s3-waf: fix the build after libcli/security changes.
      s3: fix the build of idmap_adex, idmap_tdb2, idmap_hash and several vfs modules.
      s3-waf: convert rpc into a subsystem.
      s3-waf: all subsystems complete now, no need for this loop anymore.
      s3-waf: move RPC_CLIENT_SCHANNEL into a subsystem.
      s3-waf: convert LIBSMBCONF into a subsystem.
      s3-waf: more registry cleanup.
      nsstest: no need for two copies of the same tool.
      s3-selftest: add vfs_modulesdir variable for both test systems.
      s3-waf: use LZXPRESS subsystem.
      s3-waf: add vfs_time_audit to the build.
      s3-waf: add check for httpConnect and httpConnectEncrypt.
      s3-waf: add idmap_autorid to the build.
      s4-smbtorture: allow to test returned type after specific error code in PrinterData tests.
      s4-smbtorture: use test_GetPrinterData{Ex}_checktype calls in RPC-SPOOLSS tests.
      s3-rpcclient: exit early in cmd_spoolss_enum_data() when there is a failure.
      s3-spoolss: add debug statement for access denied cases in OpenPrinterEx path.
      s3-spoolss: make sure members of "BUILTIN\Print Operators" can open printers
      s3-spoolss: fix typo in debug message.
      s3-waf: move build rules into libaddns directory.
      libaddns: add dns_errstr().
      s3-net: use dns_errstr() when dns commands fail.
      s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS.
      s4-smbtorture: re-arrange RPC-SPOOLSS-DRIVER test a bit.
      s4-smbtorture: handle driverfile overlap during removal in RPC-SPOOLSS-DRIVER.
      s4-smbtorture: add test for Adobe PostScript driver (Win9x) installation.
      s3-selftest: add WIN40 directory to print$ share.
      s3-oldtest: add WIN40 to print$ share.
      s4-smbtorture: make driver upload/removal more robust against empty filenames.
      s4-smbtorture: make add-printerdriver test more robust against empty configfiles.
      s4-smbtorture: add torture test for cupsaddsmb win9x driver install behavior.
      s3-spoolss: Fix Bug #7641: handle win9x adddriver calls w/o config file.
      s4-smbtorture: only run the cupsaddsmb adobe driver test against s3.
      s3-waf: convert FNAME_UTIL into a subsystem.
      s3-waf: convert LIBNMB into a subsystem.
      s3-waf: convert REG_EVENTLOG into a subsystem.
      s3-waf: convert TOKEN_UTIL into a subsystem.
      s3-waf: convert PARAM_UTIL into a subsystem.
      s3-waf: convert LIBCLI_SAMR into a subsystem.
      s3-waf: convert LIBCLI_LSA into a subsystem.
      s3-waf: convert LIBCLI_NETLOGON into a subsystem.
      s3-waf: convert RPCCLI_SRVSVC into a subsystem.
      s3-waf: convert RPCCLI_WKSSVC into a subsystem.
      s3-waf: convert RPCCLI_SVCCTL into a subsystem.
      s3-waf: convert RPCCLI_DSSETUP into a subsystem.
      s3-waf: convert RPCCLI_INITSHUTDOWN into a subsystem.
      s3-waf: convert RPCCLI_DFS into a subsystem.
      s3-waf: convert RPCCLI_DRSUAPI into a subsystem.
      s3-waf: convert RPCCLI_NTSVCS into a subsystem.
      s3-waf: convert RPCCLI_EVENTLOG into a subsystem.
      s3-waf: convert RPCCLI_EPMAPPER into a subsystem.
      s3-waf: convert LIBCLI_SPOOLSS into a subsystem.
      s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_SVCCTL.
      s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_NBT.
      s3-waf: let SMBD_BASE depend on NDR_NOTIFY.
      s3-waf: add LIBDRSUAPI subsystem.
      s3-waf: convert NPA_TSTREAM into a subsystem.
      s3-waf: use TLDAP in smbtorture.
      s3-waf: use SLCACHE in ntlm_auth.
      s3-waf: convert SPNEGO_PARSE into a subsystem.
      s3-waf: convert LIBNBT into a subsystem.
      s3-waf: use LIBCLI_NDR_NETLOGON.
      s3-waf: no need to compile ../librpc/ndr/ndr_compression.c twice.
      s3-waf: convert IDMAP_ADEX into a subsystem.
      s3-waf: convert IDMAP_HASH into a subsystem.
      s3-waf: convert IDMAP_AD into a subsystem.
      s3-waf: fix LIBNBT deps.
      s3-waf: convert INIT_LSA into a subsystem.
      s3-waf: convert INIT_NETLOGON into a subsystem.
      s3-waf: convert INIT_SAMR into a subsystem.
      s3-waf: convert RPC_SAMR into a subsystem.
      s3-waf: convert RPC_LSARPC into a subsystem.
      s3-waf: avoid module name uppercasing.
      s3-waf: align some krb5/gssapi configure checks with classic build.
      s3-waf: add idmap_ldap to default static module list.
      s3-waf: add configure check for dirfd and build vfs_syncops vfs_dirsort if possible.
      s3-waf: more krb5 configure checks.
      s3-waf: more krb5 configure checks.
      s3-waf: add krb5 configure checks for enctype 23.
      s3-waf: add krb5 configure check for WRFILE_KEYTAB.
      s3-waf: add pam configure checks.
      s3-waf: fix pam dependencies of the RPC_SAMR server.
      s3-waf: fix library names (we installed liblibsmbclient, etc.)
      s3-waf: fix the build of nsstest in the non-devel build.
      s3-waf: add support for --with-dnsupdate.
      s3-waf: build vfs_fileid module if possible.
      s3-waf: add valgrind configure checks.
      s3-waf: add configure/declaration checks for fdatasync, readahead and splice.
      nss_wrapper: make nss_wrapper.pl executeable.
      s3-waf: add -Wl,--export-dynamic to LDFLAGS.
      s3-selftest: support differing VFSLIBDIR in autoconf and waf build.
      s3-waf: try to fix the build with snow leopard.
      s4-smbtorture: paranoia check for architectures in request and reply for enumdrivers test.
      s3-waf: use shared LIBASYNC_REQ subsystem.
      s3-waf: convert lib/util_tdb.c into a subsystem.
      s3-waf: convert UTIL_SRC into a subsystem samba-util, similar to the s4 one.
      s3-waf: add CHARSET subsystem.
      s3-waf: recurse into ../libcli/auth.
      s3-waf: fix pamsmbpass libwbclient dependency.
      s3-waf: check for "WITH_PAM_MODULES" to determine pam_smbpass build.
      s3-waf: add pam_ and nss_winbind.
      s3-waf: recurse into ../libcli/drsuapi.
      s3-waf: recurse into ../libcli/named_pipe_auth.
      s3-waf: recurse into ../libcli/samsync.
      s3-waf: recurse into ../libcli/smb.
      s3-waf: recurse into ../libcli/ldap.
      s3-waf: add missing libnss_wins.so.2 library.
      s3-waf: libwbclient does not depend on talloc anymore.
      s3-waf: rework rpc_server handling a bit.
      s3-waf: add libkrb5 winbind locator plugin.
      s3-waf: fix winbind-client subsystem.
      s3-waf: use shared libwbclient wscript_build.
      spoolss: fill in PerMachineConnections add and delete IDL.
      s4-waf: nsstest only needs replace.
      s3-net: fix net sid type build warning.
      s4-smbtorture: add torture_assert_strn_equal macro.
      s4-smbtorture: skipping level 8 driveradds against w2k3.
      s4-smbtorture: skip level 8 checks in test_GetDriverInfo_winreg for w2k3.
      s4-smbtorture: pass down driverosversion to test_DriverInfo_winreg.
      libcli/security: remove unused variable.
      s4-smbtorture: check if returned driver paths match requested architecture.
      s4-smbtorture: allow to call test_GetDriverInfo_winreg without printer handle.
      s4-smbtorture: run the winreg tests also against an added driver.
      s4-smbtorture: interesting, DriverDate and DriverVersion are different in w2k3 and w2k8r2.
      s4-smbtorture: add torture_assert_nttime_equal macro.
      s4-smbtorture: check the returned driver date is equal to the one we passed in.
      s4-smbtorture: fix expected driver date REG_SZ string.
      s4-smbtorture: always skip addprinter{ex} level 1 tests for now.
      s3-spoolss: handle NTTIME(0) as "01/01/1601" REG_SZ in driver dates.
      s3-printing: fix crash bug in print_spool_open().
      s3-waf: fix the build.
      testprogs: testspoolss.exe: pretty print FILETIME in driver info 6 and 8.

Holger Hetterich (2):
      Fix bug #3185 - testparm exits 0 if it can read the config file regardless of errors
      Updated french translations from Jean Delvare <jdelvare at suse.de>

Ira Cooper (1):
      s3: Adding TCP_KEEPALIVE_THRESHOLD and TCP_KEEPALIVE_ABORT_THRESHOLD to the list of accepted socket settings.

James Peach (2):
      smbtorture: Fix typo in status message.
      smbtorture: correct error handling in BASE-OPEN.

Jelmer Vernooij (502):
      pytdb: Make filename argument optional.
      testtools: Import newer upstream revision.
      Merge branch 'v4-0-stable' into newmaster
      Open alpha 14.
      s4-pidl-python: use correct talloc pointer when allocating subobjects.
      pidl: Fix segfault when accessing unicode objects.
      testrpc: Convert from a single unit test to a simple test script, be
      s4-pild-python: Fix assignments - even though we reference the mem_ctx
      pytestrpc: Be more verbose.
      rpc_talloc: Update test now that we create fewer references.
      pidl/python: Allow passing in UTF8 string objects as well as unicode
      pytalloc: Add default compare function.
      s4: Add convenience script for building and landing a tree in the
      s4: Add script for landing a branch through a remote server, such as sn.
      pymessaging: Remove unused older python irpc bindings.
      s4-land: Print commands that are being run.
      strlist: Make test names unique.
      selftest: Fix generation of test id file.
      torture: Fix running individual tests.
      s4-test: Allow running individual tests for smbtorture tests.
      torture: Remove active_testname variable.
      s4-selftest: Use loadlist in a couple more places.
      selftest: Support running individual tests using idlists, for testsuites that support them.
      selftest: Use idlist testing for python tests.
      selftest: Fix run for systems without testtools installed.
      s4-selftest: Move more tests to scripting/python, simplifies running of tests.
      selftest: Let tests add prefix to tests by themselve.
      s4/selftest: Simplify running of python tests.
      ndrdump: Move blackbox test to standard python namespace.
      subunithelper: Cope with errors outside of testsuites.
      pygensec: Implement start_mech_by_name().
      s4-param: Check type when converting python object to lp_ctx, fix some
      s3-selftest: Fix test prefixes in subunit output.
      s4-param: Fix more memory leaks, invalid memory context.
      ldb: Depend directly on replace, fixes the build on systems with
      ldb: Use waf as default build system.
      dsdb: Use short path for ldb_handlers.h, in case ldb is installed in the
      selftest: Remove unused --analyse argument.
      selftest: Add prefix on a higher level, so it can be more easily
      s4-selftest: Cleanup formatting.
      selftest: Fix use of --load-list.
      s4-selftest: Add environment name to test suite manually, so we can
      s4-selftest: For idlist tests, leave out environment name.
      selftest: Fix idlist running.
      selftest: Fix testsuite counts when running only a limited number of
      smbtorture: Use subunit C library.
      torture: Use system subunit library if available.
      smbtorture: Report times.
      s4-selftest: Fix prefixes for ldb tests - they're samba4 specific.
      s4-selftest: Move samba3sam test to standard python directory.
      s4-selftest: Move credentials tests to standard python directory.
      torture: Remove unused variable.
      selftest: Use variable for clientdir.
      selftest: Pass prefix to setup_env function.
      tevent: Switch to using waf by default.
      tevent: Add infrastructure for python bindings.
      selftest: If a testsuite is killed by a signal, let selftest die.
      pytevent: Fill in client side fnuctions.
      pytevent: Add more tests.
      Check in configure/Makefile for those projects that have waf as primary build system.
      pyteven: Fix build warnings.
      Add dedicated exception for immediate failure in filter-subunit, don't raise it on known exceptions.
      selftest: Abort early on SIGPIPE.
      format-subunit: Display number of failed tests even if there are no
      ldb: Bump version because of addition of ldb_req_location.
      ldb: Remove samba-specific targets from Makefile.
      ldb: Update autogen-waf.sh to no longer overwrite existing files.
      tevent: Don't update Makefile/configure files.
      tevent: Remove make targets that are not relevant for tevent.
      ldb/tevent: Fix detection of waf paths.
      samba4: Don't update Makefile/configure from autogen.sh.
      ldb: Fix path to alternative buildtools.
      testtools: Import new upstream snapshot.
      subunit: Import new upstream snapshot (adds subunit_progress())
      selftest: Avoid accessing deprecated BaseException.message.
      selftest: Eliminate some unnecessary spaces.
      s4-selftest: Add some more comments to skip file.
      s4-selftest: Convert tests.sh to Python.
      s4-selftest: Finish conversion of selftest.sh to Python.
      s4-selftest: Normalize paths.
      s4-selftest: Remove unnecessary PYTHONPATH overrides.
      delete_object: Remove unnecessary pass calls.
      selftest: Let selftest provide the tempdir, rather than creating it as sideeffect of tests.py.
      pidl: Fix handling of typedefs of typedefs.
      autobuild: Simplify find_git_root.
      autobuild: Remove autogen step for projects that have checked in configure.
      autobuild: Add --daemon option.
      Remove land.py - it's been obsoleted by autobuild.py.
      autobuild-remote: Support autobuild.py rather than land.py.
      autobuild: Add --always-email option.
      autobuild: Provide more information about build sequence, stage name and output mime type (all plain text for now).
      s4: Add 'subunit-test' make target.
      s3-configure: Require at least version 1.2.6 of external TDB, which has
      s3: Add subunit-test target.
      s3-selftest: fix prefix in subunit output.
      autobuild: Output test results in subunit.
      autobuild: Avoid unnecessary chdir() calls.
      Split land.py back out of autobuild.py, so I can change it without
      land: Avoid more uses of chdir().
      land: Move more functionality onto builder.
      land: Add --repository option.
      land-remote: Use --repository option.
      land-remote: Checkout repository first.
      land: Avoid running things in a shell where not necessary.
      Several smaller cleanups, use python coding style.
      land: Add --fail-slowly option.
      land: Only pass shell=True if necessary.
      land: Move stage building into a separate class so we can have subclasses (e.g. subunit-specific).
      land: Cherry-pick tridges changes to autobuild.
      land: Add separate treestagebuilder for subunit.
      selftest: Move plain text formatter to subunithelper.
      format-subunit: Split out summary file writing.
      subunithelper: Make filter options optional.
      land: Implement --fail-immediately directly in Python, provide subunit file.
      subunithelper: Fix format time.
      subunithelper: Remove accidentally added line.
      pytdb: Include Python.h first to prevent warning.
      land-remote: Pass extra arguments on to land.
      land-remote: Run remote land command unbuffered.
      land: Add --revision argument.
      land: Attach test output files to result emails.
      land: Some cosmetic fixes.
      land: Attach tarball of logs rather than individual logs to keep the
      land: Force always emailing when there is no other mechanism of progress reporting.
      heimdal: convert some subsystems to libraries, consistent with upstream heimdal.
      heimdal: Convert hx509 to library.
      pidl: simplify some generated code.
      pidl: Allow longs for bitmasks.
      land: Inherit EMAIL from the environment.
      wafsamba: Move heimdal library code to heimdal_build.
      heimdal: Move autoproto code to heimdal_build.
      heimdal: Move SAMBA_ERRTABLE to heimdal_build.
      heimdal: Move asn1 list to heimdal_build.
      wafsamba: Some reformatting.
      registry: Make a two more functions static.
      pytdb: Add __version__ attribute.
      waf: Add function for checking for system python modules.
      tdb: Support using system pytdb.
      tdb: Only use system pytdb when using system tdb.
      land-remote: Announce what address email is going to be sent to.
      land-remote: Force running in foreground when pushing to master.
      heimdal: Support using system com_err.
      compile_et: Support using system compile_et.
      heimdal: Fix names of roken, wind libraries.
      heimdal: Fix library name of gssapi.
      heimdal: Fix library name of heimntlm.
      heimdal: Fix name of 'hdb'.
      heimdal: Fix name of kdc library.
      heimdal: Fix name of hx509 library.
      heimdal-build: Add custom heimdal generator.
      heimdal-build: Add heimdal specific subsystem function.
      heimdal-build: Implement HEIMDAL_LIBRARY with fewer wafsamba functions.
      heimdal-build: Add HEIMDAL_BINARY convenience method.
      heimdal-build: Simplify calls to convenience functions.
      ldb: Refer to ldb(3), not ldb(7).
      Add missing dependencies for com_err.
      land: Simplify retry checker.
      land: Fix failure detection.
      land: Print out failed test in case of subunit failures.
      land: Fix stage description during failure.
      heimdal-build: Require com_err library to provide com_right_r function.
      land: Use temp dir if /memdisk is not available.
      talloc: Fix #include line in manpage.
      heimdal_build: Fix dependencies for hx509.
      wafsamba: Clarify needs_python argument name, use pyembed/pyext where
      wafsamba: Fix init function when building modules as shared objects.
      tls: add missing dependency on util_tevent.
      samdb: Handle schema setup in samdb, not in more generic ldbsamba.
      samdb: Add flags argument to samdb_connect().
      ldb-samba: Add convenience function for doing a Samba-style LDB init.
      ldb-samba: Split up ldb_wrap_connect() a bit.
      ldb-samba: Add ldb_wrap_add, remove last schema reference from ldb_wrap.
      cldapd: Add missing dependency on ldbsamba.
      secrets: Add missing dependency on ldbsamba.
      idmap: Add missing dependency on ldbsamba.
      gensec: Support building without any linked-in modules.
      dsdb: Move attr_in_list to SAMDB_COMMON to avoid circular dependency between SAMDB_COMMON and DSDB_MODULE_HELPERS.
      ldb-samba: Rename samdb_relative_path to ldb_relative_path, as it's not samdb-specific.
      dsdb: add missing dependency on samba_socket.
      util: Link headers to correct subsystem, fix formatting.
      samdb: Remove dependency on unknown subsystem.
      rpc_ndr_netlogon: Add missing dependency on tevent.
      dsdb modules: Split ridalloc out of common helpers, because of dependency loops.
      libcli-auth: Remove unnecessary dependency on libsamba-hostconfig.
      libsecurity-common: Add missing dependency on libndr.
      ntvfs_ipc: add missing dependency on dcerpc_common.
      dsdb/schema: Move some dsdb_dn functions that are schema-specific.
      librpc: Remove unnecessary dependency on libsamba-hostconfig.
      smb2: Add missing dependency on NDR_DFSBLOBS.
      smb_server: Split core out of service, since the service can be built as a .so against which we can't link.
      kdc: Add missing dependency on samba_gensec_server.
      ldap_server: Add missing dependency on gensec_server_start.
      torture: Link against rpc server itself, not service module. (against which we can't link).
      wafsamba: Support setting pyembed on libraries.
      torture_auth: Add missing dependency on gensec_ntlmssp.
      dsdb/modules: Split up helpers a bit to prevent recursive dependencies.
      wafsamba: Fix handling of pyembed/pyext.
      service: Add missing dependency on process_model.
      server: Add missing dependency on schannel database.
      credentials: Move code that doesn't need any external dependencies into
      auth: Remove unnecessary dependencies, fix formatting.
      kerberos_util: Put into separate subsystem.
      credentials: Split up into several subsystems.
      credentials: Fix the build.
      util: Fix installation path of tevent_ntstatus.h, tevent_unix.h (bug 7720).
      credentials: Avoid unnecessary includes.
      popt_credentials: Implement pending machine account manually, rather than through credentials.
      samdb_common, ntlm: Add missing dependency on libsamba-hostconfig.
      ldb: Build ildap module as shared object.
      land-remote: Fix --fail-slowly.
      wins_ldb: Build as shared library.
      dsdb: Build some more modules as .so files.
      selftest: Avoid check_call(), use call() instead. This should fix
      dsdb: Build some more modules as shared object files.
      dsdb: Build some more modules as shared objects.
      dsdb: Build more modules as shared objects.
      wafsamba: Warn about circular dependencies between libraries.
      torture/becomedc: Add test for global schema, use samdb_connect().
      samdb: Build as library.
      dsdb/schema_load: Build as shared object.
      dsdb/schema_data: Build as shared object.
      wafsamba: Don't allow circular dependencies involving libraries by
      wafsamba/developer: Forbid shared objects with unresolved symbols, if
      ldb: Only build LIBLDB_MAIN when building ldb itself.
      samdb: Set soname.
      heimdal: Add sonames.
      heimdal: Add soname for com_err.
      heimdal_build: Allow using system wind.
      heimdal Add missing dependencies on wind.
      heimdal_build: Use existing functions for finding system libraries.
      heimdal: Support using system roken.
      heimdal_build: Put version objects in a separate subsystem.
      heimdal_build: Fix build with system roken.
      heimdal_build: Support using system hx509 library when explicitly
      heimdal_build: Initial work on supporting an external heimdal library.
      heimdal_build: Add comment with stub for finding the system libtommath.
      heimdal_build: Skip some hx509 code when using system hx509.
      heimdal_build: Support using system asn1 library.
      heimdal_build: Remove ignored argument ldflags from HEIMDAL_BINARY().
      heimdal_build: Fix detection of system roken library.
      heimdal: Simplify handling of ../heimdal prefixes in HEIMDAL_SUBSYSTEM.
      heimdal: Add variables for source files.
      heimdal: Call HEIMDAL_AUTOPROTO_PRIVATE() manually.
      heimdal: Call HEIMDAL_AUTOPROTO() manually.
      heimdal: Add convenience functions for finding heimdal paths.
      heimdal: Allow leaving off ../heimdal prefix for source files.
      heimdal: Allow leaving off ../heimdal prefix for proto headers.
      heimdal: Allow leaving off prefix for HEIMDAL_ASN1().
      heimdal: Allow leaving off prefix to HEIMDAL_ERRTABLE().
      heimdal: Leave off ../heimdal prefix to HEIMDAL_BINARY().
      heimdal: Allow leaving off prefix from asn1 option_file.
      heimdal: Remove some unused arguments from HEIMDAL_SUBSYSTEM().
      heimdal: Add local simpler copy of to_list().
      tdb: Bump version to 1.2.7 after addition of pytdb.__version__.
      dcerpc_samr: Fix -l arguments for dcerpc_samr and dcerpc_atsvc.
      dsdb: Module aliases require to be prefixed with the subsystem name.
      heimdal: Attempt to fix path of hdb_asn1.h
      heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG.
      tdb: Set _PUBLIC_ in C file rather than header files (Debian bug 600898)
      Lowercase socket_wrapper name.
      tdb: Revert re-addition of tdb_set_logging_function.
      ldb: Install pyldb-util as public library.
      ldb: Install pkg-config file for pyldb.
      ldb: Support using system pyldb library.
      waf: Rename some BUNDLED_ functios to PRIVATE_.
      s4: Rename LIBNETIF to libnetif.
      s4: Rename NDR_TABLE to ndr_table.
      s4: Rename LIBEVENTS to libevents.
      s4: Rename WRAP_XATTR to wrap_xattr.
      s4: Rename UID_WRAPPER to uid_wrapper.
      s4: Rename NSS_WRAPPER to nss_wrapper.
      waf: Rename LIBWINBIND-CLIENT to libwinbind-client
      s4: Rename SAMDB_COMMON to samdb_common.
      s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}
      s4: Rename LIBSAMBA-* to libsamba-*
      waf: Lowercase several library names.
      s4: Rename SMBPASSWD to smbpasswd.
      s4: Rename DB_GLUE to db_glue.
      s4: Rename WBCLIENT to wbclient.
      s4: Rename LIBCLI_LDAP to libcli_ldap.
      s4: Rename LIBCLI_NBT -> cli_nbt.
      ldb: Rename pyldb pkg-config file to pyldb-util, to avoid confusion with
      torture/local: Depend on NSS_WRAPPER, even if it wasn't enabled.
      s4: Drop duplicate 'lib' prefix for private libraries.
      dcerpc_dns: Change back to subsystem for the moment.
      waf: build private libraries with so names.
      torture_local: Add missing dependency on socket_wrapper.
      waf: Remove lib prefix from libraries manually.
      waf: Don't auto-lowercase library names.
      waf: Stop automaticaly changing dashes to underscores in library names.
      waf: Only specify vnum for non-private libraries.
      talloc: Move pytalloc to lib/talloc.
      talloc: Avoid dependency on unknown EXT_LIB_PYTHON.
      waf: Remove unused EXT_LIB_PYTHON.
      talloc: Install pytalloc-util as system library.
      talloc: change pytalloc-util to be a public library.
      wafsamba: Fix soname for standalone private libraries.
      talloc: Fix manual pages in standalone build.
      talloc.3: Remove documentation for deprecated talloc_append_string,
      replace: Only build replace-test in standalone build.
      replace: Avoid autoproto as it breaks standalone builds.
      tevent: Drop autoconf-based build system for standalone build.
      ldb: Drop autoconf-based build system.
      replace: Fix formatting.
      s4: Remove the old perl/m4/make/mk-based build system.
      talloc: Switch over to using waf as the default build system for the standalone build.
      replace: Build using waf by default.
      replace: Look harder for waf.
      talloc: Look harder for waf.
      replace/talloc: Avoid automatically pulling in new configure/Makefile,
      tdb: Use waf by default.
      talloc: Install pytalloc.h.
      filter-subunit: Add --fail-on-empty argument.
      pydsdb: Import testtools before subunit for those that don't have
      possibleinferiors: Fix formatting.
      possibleinferiors: Report subunit.
      urgent_replication: Fix formatting
      samba: Make in_source_tree() public.
      provision: Look for in source setup data first, in case an older version
      selftest/tests.py: Fix typos.
      urgent_replication: Fix syntax error.
      selftest: Allow some tests to output empty subunit data.
      urgent_replication: forbid empty subunit output.
      selftest: Allow some tests to output empty subunit data.
      samba_utils: Use LIBDIR rather than assuming it is set to $prefix/lib.
      Add --with-privatelibdir build option.
      Add --disable-rpath-private-install flag.
      wafsamba: Support expanding variables in LIBDIR/PRIVATELIBDIR variables.
      wafsamba: Drop private library prefix when installing private libraries
      wafsamba: Use project name variable rather than hardcoding 'samba4'.
      waf: Put private libraries in a separate directory when building.
      talloc: rename pytalloc.c to pytalloc_util.c
      talloc: Add python talloc module, move convenience functions to it.
      pytalloc: Make some arguments optional.
      samdb: Make private (at least for the moment).
      samdb: Lowercase library name.
      ldbsamba: Lowercase library name.
      credentials: Lowercase library name,
      Lowercase DNS_UPDATE_SRV name.
      s4-waf: Only enable various wrappers if they're actually used.
      heimdal_build: Add missing dependency on replace, necessary because replace.h is included.
      socket_wrapper: Only add as global dependency when enabled.
      unix_privs: Add missing dependency on libreplace.
      torture: Only add in tests for socket_wrapper/nss_wrapper when they have been enabled.
      wafsamba: Support make dist from bzr checkout.
      sambaversion.py: Some cleanups, make less git-specific.
      Put git tree finding into a separate function.
      samba_version: Cope with building snapshots in directories without git checkout.
      samba_version: Support retrieving snapshot identity from bzr.
      samba_version: When working from git checkout, display git revision SHA1 rather
      s4: Remove obsolete mkversion.sh
      waf/samba_version: Support integer defines.
      samba_version: Simplify dirty tree detection.
      samba_version: Make COMMIT_IS_CLEAN an int rather than a string.
      waf/samba_version: Simplify git show command.
      Don't build ldb tools when there is a system provided ldb.
      Re-enable ldb-cmdline for the moment, as it is used by oLschema2ldif.
      Add myself as maintainer for pytevent, pytalloc, pytdb and pyldb.
      Build wrepl server as service by default.
      winbind: Build as shared module.
      kcc/drepl: Build as service.
      web_server: Build as module.
      s4/dns: Build as shared module.
      auth/ntlm: Use name consistent with other service names.
      kdc: Build as shared module by default.
      cldap: Build as shared module.
      s4: Build ldap and samba3_smb services as shared modules.
      nbtd: Build service as shared module.
      heimdal_base: Add missing dependency on replace.
      smb_server: Build as shared module.
      heimdal_base: Fix include path so heim_threads.h can be found.
      subunithelper: Exit with 1 if more than zero testsuites failed or
      selftest: Even if setting up an environment failed, the next tests may
      selftest: When running on the buildfarm, pipe everything through
      service_ldap, service_smb: Lowercase output file names.
      pyldb: Fix broken test.
      selftest: Allow using ldb* utilities from system.
      blackbox.ldb: Support using system ldbsearch.
      show_test_time: Move to root scripting directory as it's useful for s3
      samba.tests: Fix formatting.
      Makefile: Add rule for pydoctor.
      s4-python: Fix formatting of docstrings for the purpose of pydoctor.
      samba.provision: Add package with provision and backend modules.
      samba.provision: Fix setup_path.
      s4-selftest: Ignore broken pipe error from grep.
      chgtdcpass: Fix program name in usage message.
      samba.getopt: Fix missing import of sys.
      samba.hostconfig: Move samba.shares into samba.hostconfig.
      samba.upgradehelpers: Simplify code a bit.
      s4-python: Some reformatting for the purpose of pydoctor.
      samba.tests.hostconfig: Fix import.
      samdb: Build as public library.
      samba_dist: Fix dist for subprojects.
      wafsamba: Only use private library rpath when linking against private
      wafsamba: Fix indentation.
      talloc: Add talloc object.
      pidl: Base new objects off of talloc object.
      pytalloc: Add convenience function for checking if something is a talloc
      pidl: Allow more flexibility importing modules using convenience function.
      pidl/python: Allow import of talloc, even though it doesn't live in the
      pytalloc: Expose PyTalloc_GetObjectType
      pycredentials: Use talloc.Object.
      pygensec: Use talloc.Object.
      pyauth: Use talloc.Object.
      pyregistry: Use talloc.Object.
      pyparam: Use talloc.Object.
      pytalloc: Make py_talloc_default_repr private (now exposed by talloc.Object).
      pytalloc: Make py_talloc_dealloc private.
      pytalloc: Make py_talloc_default_cmp private.
      pygensec: Fix initialization.
      talloc: Bump version number after pytalloc changes.
      wafsamba: Override GIT_DIR without using putenv.
      wafsamba: Only include versioned files when building tarball from bzr.
      s4-python: Add some more module docstrings.
      s4-python: Add more module docstrings.
      pytalloc: Add docstring for talloc.Object.
      ldb: bump version number after introduction of new constant.
      selftest: Document --testenv in --help output, remove documentation for
      selftest: add --list option.
      testtools: Import new upstream snapshot.
      subunit: Update to newer upstream snapshot.
      dnspython: Update to newer upstream snapshot.
      selftest: Rename $LIST to $LISTOPT for consistency with testrepository.
      subunitrun: Support --list.
      selftest: Allow discovering tests in pure python testsuites.
      s4-selftest: Add convenience function for running testsuites using
      selftest: Check exit code when listing tests.
      smbtorture: Rename --list to --list-suites, add stub --list.
      selftest: Make sure system subunit.run has TestProgram.
      s4-python: Split up ensure_external_module.
      s4-python: Fix use of bundled modules.
      s4-dist: Remove no longer existing files from blacklist (fixes 'make
      subunitrun: Remove global subunit module when reimporting from a
      subunitrun: Extend hack to cope with older system subunit run installs.
      s4-python: Add convenience function for forcibly importing bundled
      subunitrun: Use unittest.TestProgram if subunit.TestProgram is not
      talloc: Add ability to generate Python docs using pydoctor.
      s4-smbtorture: Make test names lowercase and dot-separated.
      smbtorture: Implement --list argument.
      smbtorture: Default to listing all tests if no prefix was specified.
      filter-subunit: Add --list argument.
      selftest: Support multiple instances of $LISTOPT.
      selftest-s4: Support listing smbtorture4 tests.
      Move get_loadparm() and get_credentials() to samba.tests.TestCase.
      join: Properly cancel transaction on exceptions.
      ldb: Build modules as .so files.
      ldb: Bump API after symbol changes.
      heimdal_build: Simplify library handling.
      Simplify link installation.
      wafsamba: Move version script handling out of SAMBA_LIBRARY.
      wafsamba: Don't build vscript for modules.
      heimdal_build: Simplify version_script handling.
      wafsamba: Specify full vscript path so non-autogenerated files are possible, too.
      heimdal_build: Add version-script for com_err.
      heimdal_build: Add version-script for roken.
      heimdal: Add version script file for hcrypto (unused so far, as hcrypto still needs to be made a proper library).
      heimdal_build: Add version-script for ntlm.
      heimdal_build: Add version-script for wind.
      heimdal_build: Add version-script for kdc.
      heimdal_build: Add version-script for hdb.
      heimdal_build: Add version-script for asn1.
      heimdal_build: Add version-script for gssapi.
      heimdal_build: Add version-script for krb5.
      heimdal_build: Add version-script for heimdal_base, hx509 and hcrypto. Convert hbase and hcrypto to libraries.
      heimdal_build: Simplify HEIMDAL_LIBRARY - version_script files are now taken from upstream rather than generated.
      wafsamba: Use abi_match in version script files.
      Add bzrignore symlink.
      pidl: Use system pytalloc if possible.
      ldb: Rename two exported functions so they match abi_match.
      ldb: Add prototype for ldb_init_module.
      ldb: Rename last instance of save_controls -> ldb_save_controls.
      ldb_map: Fix prefix for map functions.
      ldb: Rename controls_except_specified -> ldb_controls_except_specified.
      pidl: Add prototype for init function in pidl-generated Python bindings.
      pyglue: Add prototype for init function.
      pyrpc: Add prototype for init function.
      dcesrv_srvsvc: Use constants.
      ldb: Bump version after renaming some public symbols which didn't have a
      heimdal: Fix build if using system roken.
      testtools: Merge in new upstream.
      dnspython: Merge in new upstream.
      ldb: Add ldb.Message.add and ldb.Message.elements.
      pytdb: Make PyTdb variable static.
      tdb: Bump version number after symbol versioning changes.
      tevent: Bump version number after symbol versioning changes.
      talloc: Remove reference to nonexistant configure.developer in autogen.sh.
      tevent: Remove reference to nonexistant configure.developer from autogen.sh.
      wafsamba: Allow newer or the same python module versions to be installed,
      heimdal_build: Allow using system hbase and hcrypto.
      heimdal_build: When using system hbase/hcrypto, don't compile our own versions.
      heimdal_build: Use consistent name for heimbase.
      MAINTAINERS: List tridge and me as maintainers of wafsamba and the wscripts.
      MAINTAINERS: add rusty as the tdb maintainer.
      MAINTAINERS: List rusty and tridge as maintainers for talloc.
      tdb: Remove autotools support.
      talloc: remove autotools support.
      wafsamba: Fix handling of nick name in VERSION.
      WHATSNEW: Fix typo, indentation.
      update whatsnew for alpha14.
      mkrelease: Simplify further.
      Release alpha14.

Jeremy Allison (89):
      Fix bug #7693 - smbd changing mode of files on rename
      Thank goodness for code reviews. Volker caught - this should be lp_posix_pathnames()
      Fix bug 7694 - Crash bug with invalid SPNEGO token.
      Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Change to using TDB_INCOMPATIBLE_HASH (the jenkins hash) on all
      Small tweak to bugfix for 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Add torture test BAD-NBT-SESSION as regression fix for bug 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
      Fix bug 7704 - Possible error in fix to rpc_server/srv_spoolss_nt.c.
      Fix crash in SMB2 rename found by gentest. We must always have an lcomp
      Fix crash in SMB2 rename found by gentest. We must always have an lcomp
      Fix bug 7716 - acl_xattr and acl_tdb modules don't store unmodified copies of security descriptors.
      Add some const. Needed for my SD work.
      More neccessary const.
      Make the posix ACL module cope with a NULL incoming DACL and a
      Canonicalize incoming and outgoing ACLs.
      Make the vfs_acl_xattr and other modules work with NULL SD's. Fix
      Fix bug #7733 - Invalid client DOS attributes on create can cause incorrect unix mode_t to be generated.
      Fix bug #7734 - When creating files with "inherit ACLs" set to true, we neglect to apply appropriate create masks.
      Fix valgrind "uninitialized read" error on "info" when returning !NT_STATUS_OK.
      Add debug message to get_nt_acl_internal() to see what we got.
      Fix "force unknown ACL user" to strip out foreign SIDs from POSIX ACLs if they can't be mapped.
      Fix handling of "NULL" DACL. Map to u/g/w - rwx.
      Add make_default_filesystem_acl() function to be used in following change to acl_xattr and acl_tdb module.
      Add acl_xattr:ignore system acls boolean (normally false) to allow
      Ensure we have correct parameters to use Windows ACL modules.
      Don't arbitrarily clean all parametric options in add_a_service(),
      Move tcons.num_open from smb1 to sconn->num_tcons_open as this is needed for SMB2 also.
      Copyright/whitespace/comment cleanup in preparation for adding SMB2 paths.
      Add SMB2 paths to smbd/conn.c. Except for conn_idle_all(), to be cleaned up next.
      Add deadtime detection for SMB2. Correctly update lastused timestamp across all active tcons. Should fix dfree cache not updating bug.
      Fix shadow warning for "access" variable.
      Make getpwnam_alloc() static to lib/username.c, and ensure all username lookups go
      Add code to implement SeSecurityPrivilege in net rpc rights, and in the
      Now we have SeSystemSecurity, remove the source3-only #ifdef.
      Fix const warning. Allocate off NULL as we always talloc_free().
      Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed
      Revert "Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed"
      Fix for bug 7755 - SMBC_getdents_ctx() ignores struct alignment rules
      Fix bug #7700 - Improvement of return code of smbclient
      First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
      Ensure we always have a mapped group for "Domain Users".
      Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
      Remove fstring from map_username. Create a more sane interface than the called-parameter-is-modified.
      Ensure we check the return from make_user_info before dereferencing the value returned by it.
      Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when adding new share via MMC
      Fix memleak I accidently introduced when reading from tdb.
      Add test that detects problems in the SMB signing code when run through cli_write() (which doesn't use the new async methods).
      Fix bug #7791 - gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing.
      Move error reporting of messaging context creation fail into
      Fix the unexpected.tdb database problem. Change nmbd to store the
      Move the uglyness of #ifdef REALPATH_TAKES_NULL into the vfs_default
      Fix bug #7785 - atime limit.
      Fix bug #7812 - vfs_acl_xattr/vfs_acl_tdb: ACL inheritance cannot be disabled
      Add in fsp->access_mask checks. Not required (underlying system does this)
      Fix bug discovered with "encryped passwords = no".
      Fix a typo - should be '&&' not '&' when checking for privileges.
      Turns out there are lots of places in S3 where token passed in
      Fix bug #7835 - vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on
      Move posix_fallocate into the VFS where it belongs.
      Oops. Missed adding vfswrap_posix_fallocate to vfs_default_fns table.
      Merge the two conflicting allocation codes into one function, vfs_slow_fallocate()
      posix_fallocate() returns an errno, not -1 on error.
      Replace lseek()/write()/lseek() triple with pwrite call. We already emulate this
      s3: Fix bug 7843: Expand the local SAMs aliases
      Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to 128 credits.
      Add documentation for "smb2 max credits".
      Remove extra unused credit arg. to smbd_smb2_request_setup_out()
      We need to start off with smb2.credits_granted == 0. That way
      As we handle missing sendfile() inside lib/sendfile.c, remove the WITH_SENDFILE ifdefs.
      Change crediting so that the credits are returned on the interim async response.
      Ensure we use vfs_fsp_stat(), not VFS_STAT directly, and store into fsp->fsp_name->st
      Change interface of schedule_smb2_aio_read() to allocate the return DATA_BLOB.
      Fix read/write calls over sockets to cope with EAGAIN/EWOULDBLOCK for non-blocking sockets.
      Implement "use sendfile = yes" for SMB2. (cherry picked from commit 95cb7adcd03a1abbd0af395b6c96dd8e0eebd3d1)
      Protect the onefs sendfile from EAGAIN/EWOULDBLOCK.
      Fix bug 7866 - "net" in v3-6-test broken.
      Change strict allocate to default to true. (cherry picked from commit 820ea22a07b062b1717d35de8fa7051fc1067c3f)
      Fix old bug in openX code, exposed when "strict allocate" is set to true.
      Do more vfs_stat_fsp calls instead of FSTAT - ensures fsp->fsp_name->st is kept up to date.
      Update our attribute flags.
      file_set_sparse needs to be a handle based call.
      Move checks inside file_set_sparse() to allow it to be called from anywhere.
      Rename vfs operation posix_fallocate to just fallocate and add the vfs_fallocate_mode parameter.
      From metze's work on sparse attributes. FILE_ATTRIBUTE_SPARSE is valid on get but not on set.
      Added call out to a Linux-compatible fallocate() when we need to extend a file
      Keep track of the sparse status of an open file handle. Allows bypass of
      My algorithm for determining whan an incoming sequence number can be allowed is incorrect.
      Fix a warning message.
      All calls to event_add_to_select_args() call GetTimeOfDay() and

Joerg Pulz (1):
      Make 'net rpc printer driver' behave the same as rpcclient enumdrivers

Julien Kerihuel (1):
      Add ncacn_http (RTS) IDL implementation in dcerpc.idl

Kai Blin (43):
      s3-waf: Build libwbclient as dynamic library
      s3 waf: Remove iniparser source list from source3/wscript_build
      s3 waf: more correctly generate symbols for pdb/vfs/auth/etc. modules
      IDL: More types for the DNSP IDL file
      ndr: Add support for pulling/printing an ipv6address type
      ndr: Implement push function for IPv6 addresses
      dnsp: Allow parsing of AAAA records
      dnsp: Add MX record parsing
      dnsp: Parse TXT records
      dnsp: Add support for parsing HINFO records
      libwbclient: Remove half-finished async implementation
      lib/util: Add tevent WERROR wrappers
      s4 socket: increase the debuglevel to make add interface debug messages less verbose
      s4 dsdb kcc: Prefer msDS-hasMasterNCs over hasMasterNCs when replicating
      s4 dns: Import DNS win32 error codes from MS-ERREF
      netlogon.idl: Switch to explicit constants to remove dependency on nbt.idl
      idl: Add idl describing DNS structures
      dns/nbt: Fix spelling of the "authoritative" flag.
      s4 dns: Add a boilerplate DNS server implementation
      ndr dns: Add simple parser
      s4 dns: Reply to a name request with an A record.
      dnsp: Can't have two memebers of a union with the same name
      s4 dns: Fix a data corruption in the dns_string parsing
      s4 dns: Look up records in the ldb database
      s4 dns: Look up all names in the ldb database.
      s4 dns: Handle CNAME records
      s4 dns: Allow more components as part of a domain name
      s4 dns: start handling update requests, return correct error codes
      s4 dns: Better error handling when parsing invalid or unknown records
      s4 dns: Map between NTSTATUS and dns error codes
      s4 dns: More work on updates
      s4 dns: Split up the code into multiple files for easier development
      s4 dns: Switch to WERROR
      s4 dns: Add a prerequisites check for updates
      s4 dns: Add stub checking if updates are allowed
      s4 dns: Implement update record prescan logic
      ndr: Make sure ndr_dns.c has no lines wider than 80 chars
      s4 net: rename to samba-tool in order to not clash with s3 net
      tevent: Fix docstring, tevent_req_is_in_progress does not destroy private data
      s3 docs: Reword posix locking text to answer a common question
      ndr: Another try to support the build on non-IPv6 systems
      s4: Implement UDP echo server example
      s4 libcli: Add libcli_echo lib and torture test

Kamen Mazdrashki (158):
      s4-pyrpc: Print location and type name we got when checking for types
      s4-dsdb: Add dsdb_schema_info_blob_is_valid() to verify schemaInfo blobls
      s4-prefixMap: use dsdb_schema_info_blob_is_valid() for schemaInfo blob validation
      s4-schema: use dsdb_schema_info_blob_is_valid() to verify schemaInfo blob
      s4-schema: Helper func to compare schemaInfo signitures
      s4-test: Add unit test for dsdb_schema_info_cmp()
      s4-ldapcmp: Fix options parsing for common Samba options
      werror: Add W_ERROR_HAVE_NO_MEMORY_AND_FREE() macro
      s4-drs: Check for schema changes only in case we are *not* applying Schema replica
      s4-devel-getncchanges: Add common Samba options as a group to be displayed
      s4-dsdb-schema_prefixmap: Print debug message when internal failure occurs
      s4-dsdb-schema_prefixmap: return WERR_DS_NO_ATTRIBUTE_OR_VALUE when ATTID is not found
      s4-test: yet another test for ATTID-ot-OID conversion
      s4-ldapcmp: Enable comparisons between LDBs too
      s4-drs-test: Relax a check that may possibly fail
      s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a time
      s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connections
      s4-dsdb_schema_info.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-ldap_schema.py: Remove unused LDB connection to GC port
      s4-sec_descriptor.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-delete_object.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-fsmo.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-possibleinferiors.py: Fix usage of 'paged_search' module for remote LDB connections
      s4-python-samba: Fix few cosmetics
      s4-samba.samdb: Fix leading indention and trailing ';'
      s4-python-samba: 'file' is a built-in
      s4-samba.samdb: Fix masking names from outer context
      s4-python-test: Implement global connect_samdb() function
      s4-test-delete_object.py: Use common implementation for connect_samdb()
      s4-test-fsmo.py: Use common implementation for connect_samdb()
      s4-python-samba: Remove trailing ';'s
      s4-python-test: Common implementation for getting environment variable value
      s4-test-delete_object.py: Use common implementation for env_get_var_value()
      s4-test-fsmo.py: Use common implementation for env_get_var_value()
      s4-test-dsdb_schema_info.py: Simplify connection SamDB
      s4-test-dsdb_schema_info.py: Get rid of global module variables
      s4-test-fsmo.py: Implement kind of busy-wait for role transfer
      s4-getopt.py: Make Anonymous creds when no credentials
      s4-ldapcmp.py: Don't guess credentials for second Credentials object
      s4-test: Use absolute path for 'samba4srcdir'
      s4-test: Fix PYTHONPATH for python.drs_ tests
      s4-libnet_vampire: Reparent result.lp_ctx - we have already referenced it
      s4-provision: Reset "debuglevel" after "provision" take place
      heimdal-com_err: fix the build for systems with older 'com_err' library
      s4-test: Fix PYTHONPATH for samba4.schemaInfo.python(dc) test
      pytalloc: Fix warning that we are subtracting void* pointers
      s4-test-msds_intid: Simplify parameters for _make_error_message() function
      s4-test-msds_intid: Verify ATTIDs for Linked Attributes
      subunithelper: Don't access 'message' attribute directly as it deprecated
      s4-dsdb: Make dsdb_setup_sorted_accessors() public
      s4-dsdb-repl: Print what the error code for failure is
      s4-vampire: Initial implementation for multi-pass schema decoding from DRS data
      s4-vampire: Optimize Schema decoding conversion
      s4-libnet_vampire: Remove unused self_corrected_schema
      lib/util/asn1.c: comment spelling
      asn1_tests.c: Make test data static const
      s4-schema_init: Print more info about syntax we fail to recognize
      pytalloc: use talloc_unlink() to free py_talloc objects
      asn1: ber_write_OID_String() to be more picky about supplied OID
      asn1_tests: Implement negative unit-tests for ber_write_OID_String()
      s4-dsdb/schema_syntax: Separate validation for numericoid OID values
      s4-dsdb_syntax: Setup "String(Case Sensitive)" syntax
      s4-test: Print correct partition DN in msDSIntId test
      s4-test: Extend DRS-msDSIntId test to verify Configuration NC replica also
      s4-prefixmap: Use WERR_NOT_FOUND when OID is not found in current prefixMap
      s4-prefixMap: split dsdb_schema_make_attid() function into read-only and
      s4-pfm_test: Tests for dsdb_schema_pfm_attid_from_oid()
      s4-pfm_test: no need to test created prefixMap contents here - it already tested
      s4-dsdb_syntax: *_OID_oid_ldb_to_drsuapi() functions should use
      s4-pfm-test: Enrich and fix comment primary for testing data
      s4-pfm_test: Use single instance of global testing data to test with
      s4-schema_init: we should be able to resolve Syntax OIDs with prefixMap we have
      s4-resolve_oids: Remove redundant check - resolve_oids_need_value() handle this
      s4-drs_tests: drs_util_DsAttributeId_to_string() is not used anymore
      idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID values
      s4-druspia.idl: rename DRSUAPI_ATTID_NONE to DRSUAPI_ATTID_INVALID
      s4-dsdb_schema: Use DRSUAPI_ATTID_INVALID instead of 0xFFFFFFFF magic value
      s4-devel: Verify prefixMap is saved correctly in LDB on disk
      s4-ldb_module.h: use LDB error code for ldb_error() macro rather than LDB_DEBUG_FATAL
      s4-test: Initial implementation for Schema replication black box test
      s4-attid: Uppercase ATTID type constants
      s4-pydsdb.c: Fix small memory leak in py_samdb_set_domain_sid()
      s4-pydsdb-py_dsdb_get_oid_from_attid(): Avoid potential memory leak
      s4-pydsdb-py_samdb_ntds_objectGUID(): Avoid potential memory leak
      s4-pydsdb: py_dsdb_load_partition_usn() - simplify error handling in
      s4-pydsdb: py_dsdb_am_rodc() may call samdb_rodc() only once to get the job done :)
      s4-pyldb: Handle internal errors in py_ldb_contains() properly
      s4-test: repl_schema - Make sure LdbError and ERR_NO_SUCH_OBJECT are visible
      s4-repl: dsdb_convert_object -> dsdb_origin_object_convert
      s4-repl: dsdb_extended_replicated_objects_commit -> dsdb_replicated_objects_commit
      s4-repl: dsdb_extended_replicated_objects_convert -> dsdb_replicated_objects_convert/
      s4-dsdb_syntax: Add remote prefixMap member for dsdb_syntax conversions
      s4-dsdb_syntax: Use remote prefixMap to handle generic cases in drsuapi_to_ldb conversions
      s4-prefixMap: dsdb_schema_pfm_oid_from_attid() to use const prefixMap
      s4-dsdb_syntax: Warning message that we can't find requested ATTID in Schema Cache
      s4-repl: Propagate remote prefixMap in DRSUAPI data conversion functions
      s4-tests: Make repl_schema.py test part of Samba4 test suite
      s4-schema_load: Don't clean in_transaction flag until transaction is really finished
      s4-pyldb: Fix wrong type of 'self' parameter
      s4-pyldb: Move PyLdbMessage_FromMessage() in PyMessage group of functions
      s4-pyldb: Few miss-alignments aligned
      s4-pyldb_util: Move ldb Type searching into separate function
      s4-samdb.py: Use ldb.get_default_basedn() to avoid RootDSE search
      s4-pyldb: Move code to create a ldb_message from a Python Dictionary object into a separate function
      s4-pyldb: ldb.Message.from_dict class method to create LdbMessage object from dictionary
      s4-ldb.python: add test for ldb.Message.from_dict() method
      s4-ldb.python: Use $SELFTEST_PREFIX/tmp as a temporary directory for testing
      s4-pfm_verify: fix usage string
      s4-samba.tests: Explicitly pass LoadParm() instance to system_session() function
      s4-tests: Wrap connect_samdb() into a connect_samdb_ex() helper
      s4-test/repl_schema: Remote global ldb connections
      s4-pfm_verify: Explicitly pass LoadParm() instance to system_session() function
      s4-tests: Make all DRS python tests to start with samba4.drs.* prefix
      s4-test/repl_schema: Refactor the test a little bit to
      s4-tests/bind.py: Use samba.tests.connect_samdb() instead of directly using SamDB class
      s4-ranged_result.c: Fix memory context for ranged attributes handling
      s4-repl: Let dsdb_replicated_objects_convert() to accept schema from caller
      s4-dsdb/prefixMap: Add prefixMap shallow copy function
      s4-dsdb/schema: Add Schema shallow copy function
      s4-dsdb/schema: Implement multi-pass working schema creation function
      s4-dreplsrv: Use working_schema when replicating from Schema NC
      s4-dsdb/syntax: Implement Remote-ATTID to Local-ATTID mapping function
      s4-dsdb/syntax: Map remote ATTIDs for Attribute OID syntax
      s4-test/schema: Extend the test to replicate a Class with Attribute with "mayContain" relation
      s4-dsdb/descriptor: comment typo
      s4-test/repl_schema: Test classSchema and attributeSchema replication in separate tests
      s4-test/repl_schema: Make ERR_NO_SUCH_OBJECT visible to us
      s4-test/delete_object: Remove unused imports
      s4-test/fsmo: Remove unused imports
      s4-dsdb_syntax: Be a little bit more chatty when we can't an ATTID in our cache
      s4-test/repl_schema: Test class inheritance through subClassOf
      s4-dsdb/syntax: Map remote ATTIDs for Class OID syntax
      s4-schema_load: Strip a pointless check
      s4-repl_meta_data: Remove duplicated check
      s4-linked_attributes: Give more info where an error occured
      s4-repl_meta_data: Print function name when we can't find attribute in Schema cache
      s4-dsdb_schema: Seize using global_schema when referencing new schema for an LDB
      s4-test/repl_schema: New test to test a classSchema with custom attribute
      s4-test/repl_schema: use 'top' as default base class for our test classSchema objects
      s4-schema_syntax: Use remote prefixMap to map remote ATTID to local one
      s4-repl: Allow dsdb_replicated_objects_commit() to use different schema while committing objects
      s4-drepl: User working schema for commiting objects when replicating Schema NC
      s4-schema_syntax: We should use make_ATTID function when converting remote-ATTID to local one
      s4-dsdb_schema: We need base_dn in Schema's shallow copy too
      s4-drepl: We won't need a working schema for empty replicas sent.
      s4-schema_syntax: Log error message when _dsdb_syntax_OID_oid_drsuapi_to_ldb() fails
      s4-dsdb_schema: Handle remote ATTIDs based on msDs-IntId value
      s4-test/repl_schema: Make sure every object is with unique name
      s4-test/repl_schema: remove unused and commented out code
      s4-dsdb/tests/python: Explicitly pass comamnd line LoadParm() instance to system_session()
      s4-drepl: Fix log message to be shown on its own line
      s4-drepl: Reference current Schema cache into working_schema context
      s4-drepl: Make refreshed schema a global one
      s4-devel/pfm_verify: Extend the tool to verify schemaInfo attribute value
      s4-dsdb_schema: Copy info needed for Schema refresh in dsdb_schema_copy_shallow
      s4-drepl: During Schema replication, we need to save updated prefixMap if everything is OK
      s4-pydsdb: Use local memory context in py_dsdb_get_oid_from_attid()
      s4-devel/pfm_verify: Move schemaInfo getter into separate function

Ken Harris (1):
      CREATE in a compound CREATE/NOTIFY sequence was being passed through set_operation_credits()

Kirill Smelkov (9):
      pytdb: Add support for tdb_add_flags() & tdb_remove_flags()
      pytdb: Fix repr segfault for internal db
      pytdb: Update open flags to match those for tdb_open() in tdb.h
      pytdb: Add support for tdb_enable_seqnum, tdb_get_seqnum and tdb_increment_seqnum_nonblock
      pytdb: Add support for tdb_transaction_prepare_commit()
      pytdb: Add support for tdb_freelist_size()
      pytdb: Add TDB_INCOMPATIBLE_HASH open flag
      pytdb: Add support for tdb_repack()
      pytdb: Check errors after PyObject_New() calls

Lukasz Zalewski (1):
      Addition of userPrincipalName attribute when new account is created

Martin Schwenke (1):
      cluster_fatal() exit code should not indicate success.

Matthias Dieter Wallnöfer (451):
      s4:libcli/resolve/file.c - fix "const" warning
      s4:rpc_server/dcerpc_server.c - fix a "const" warning
      s4:drepl_out_helpers.c - fix a counter type
      s4:extended_dn_in LDB module - fix a counter type
      s4:rootdse LDB module - fix counter types
      ldb:ldb_msg_add_linearized_dn - handle NULL DNs
      ldb:ldb_match.c - fix counter variable type
      s4:password_hash LDB module - don't assign "lp_ctx" twice
      s4:rootdse LDB module - fix comment typo
      s4:rootdse LDB module - make more use of LDB result constants
      s4:python/samba/join.py - use constant for DC function level
      s4:python/samba/join.py - add a comment to point out that NCs have to be assigned dynamically
      libds:flag_mapping.c - support also the default read-only DC primary group
      s4:ldap.py - enhance SAM user/groups behaviour test regarding default primary groups
      s4:samldb LDB module - support the "userAccountControl" -> "primaryGroupID" detection also on modify operations
      s4:ldap.py - test default primary groups on modify operations
      s4:dsdb/common/util_samr.c - remove the primary group specifications
      s4:samldb LDB module - it isn't allowed to create user/computer accounts with a primary group specified
      s4:provision.py - make more use of "names.serverdn" on NTDS settings location
      s4:provision.py - support still not fully provisioned trees regarding the rootDSE module
      s4:torture/rpc/netlogon.c - remove the dependency on "samdb_server_site_name"
      s4:rootdse LDB module - better that the "edn" control handling is done last
      s4:rootdse LDB module - remove "priv" checks where not needed
      s4:rootdse LDB module - make "serverName" dynamic
      s4:provision - rootdse - remove the static attribute "serverName"
      s4:rootdse LDB module - introduce dynamic "dnsHostName" attribute
      s4:provision - rootdse - remove static "dnsHostName" attribute
      s4:rootdse LDB module - introduce dynamic "ldapServiceName"
      s4:provision - rootdse - remove static "ldapServiceName" attribute
      s4:ldap.py - add tests for the "dsServiceName", "serverName", "dnsHostName" and "ldapServiceName" rootDSE attributes
      s4:rootdse LDB module - make use of "dsdb_forest_functional_level"
      s4:lazy_commit LDB module - the "show_deleted" control is initialised by the "show_deleted" LDB module
      s4:repl_meta_data - also on delete operations the new RDN attribute has to be casefolded correctly
      s4:libcli/resolve/dns_ex.c - fix "const" warning
      s4:schema_samba4.ldif - update allocated controls list
      s4:getncchanges.c - fix some counter types
      s4:acl_read LDB module - fix counter type
      s4:ldap.py - fix "system only" test
      s4:ldap.py - delete the right object after test completition
      s4:dsdb_dn_val_rmd_flags - memmem - scan the whole string for occourences
      s4:objectclass LDB module - fix the delete behaviour of server containers
      s4:objectclass LDB module - fix the "crossRef" delete protection
      s4:subtree_delete LDB module - it is only responsible for non-deleted objects
      s4:repl_meta_data LDB module - consider the SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE flag
      s4:show_deleted LDB module - also support the "show_recycled" control
      s4:subtree_rename LDB module - also already deleted objects have to be renamed
      s4:dsdb/common/util.c - introduce "DSDB_SEARCH_SHOW_RECYCLED" flag
      s4:dsdb - substitute the "show_deleted" with the "show_recycled" control
      s4:dsdb python stuff - introduce also here the "show_recycled" control
      s4:ldap.py - remove the delete tests
      s4:deletetest.py - enhance the tests
      s4:patchfile_dotreg.c - use "size_t" when counting characters in DATA_BLOBs
      s4:urgent_replication.py - fix up the system flags handling
      s4:objectclass LDB module - introduce allowed system flags restriction
      s4:ldap.py - test allowed system flags restriction
      s4:kdc/db-glue.c - remove unused variable
      s4:dsdb/common/util.c - change the usage of the RECYCLED control
      s4:ldb_modules.c - fix a typo
      s4:kdc - use "userAccountControl" always unsigned
      s4:samldb LDB module - assign better memory contexts on two places
      s4:samldb LDB module - simplify/unify the message handling on add and modify operations
      s4:setup/provision_rootdse_add.ldif - provide informations in the right order
      s4:subtree_delete LDB module - remove the DN from an error message
      s4:samldb LDB module - remove "type" parameter of "samldb_fill_object"
      s4:dsdb/common/util.c - provide message set functions for integer types
      s4:dsdb/common/util_samr.c - use an LDB constant for result checking
      s4:ldap.py - split it up and move SAM related stuff to sam.py
      ldb:ldb_match.c - fix a counter type
      s4:samldb LDB module - first implementation of the samldb objectclass trigger
      s4:samldb LDB module - use the new "objectclass_trigger" for add operations
      s4:samldb LDB module - first implementation of the samldb primary group trigger
      s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
      s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations
      s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
      s4:ldap.py - test the "isCriticalSystemObject" behaviour
      s4:samldb LDB module - support the group type changing properly
      s4:sam.py - add a test for the group type changing behaviour
      s4:samldb LDB module - proof the account type also on LDB modify operations
      s4:samldb LDB module - deny creation of temporary duplicate accounts
      s4:sam.py - tests for "userAccountControl" attribute
      s4:samldb LDB module - cosmetic fixups
      s4:samldb LDB module - attempt to fix integer handling on big-endian platforms
      s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", "samdb_result_uint64" and "samdb_result_string"
      s4:dsdb - remove "samdb_msg_add_value"
      s4:libds/common/flags.h - fix typo
      s4:dsdb/common/util.c - samdb_msg_add_string - the attribute name doesn't need to be duplicated
      s4:dsdb/common/util.c - samdb_msg_add_* calls - proof for more OOM conditions
      s4:samdb_create_foreign_security_principal - proof error code of "samdb_msg_add_string"
      s4:samldb LDB module - cosmetic - use "ldb" variable rather than "ldb_module_get_ctx"
      s4:lsa RPC server - use LDB result constant
      s4:libnet_samsync_ldb.c - use LDB result constants
      s4:ntptr/ntptr_simple_ldb.c - use LDB result constants
      s4:lib/registry/util.c - strtoll call - better say explicitly that data is in hex format
      s4:lib/registry/util.c - cosmetic - fix indentation, trailing whitespaces
      s4:samdb_msg_add_int* - use "ldb_msg_add_string" rather than "samdb_msg_add_string"
      s4:torture/local/dbspeed.c - use LDB result constant
      s4:dsdb/common/util.c - describe the behaviour of the functions "samdb_msg_add_uint", "samdb_msg_add_uint64" and "samdb_msg_set_uint" a bit more
      s4:dsdb - fix unsigned integer save problems using the "%u" specifier
      s4:ldif_handlers.c - fix a typo
      s4:objectclass LDB module - implement the "isCriticalSystemObject" subtree delete protection
      s4:samba3sid LDB module - handle the RID as uint32_t
      s4:dsdb/samdb/ldb_modules/util.c - remove now unused functions which set integers
      s4:samldb LDB module - use appropriate fixed-length integer types where needed
      ldb:"ldb_dn_canonical" - use an "unsigned int" counter
      ldb:"ldb_dn_remove_base_components" - use an "unsigned int" counter
      ldb:"ldb_dn_add_child" - use "unsigned int" counters
      ldb:"ldb_dn_compare_base" - use "unsigned int" counters
      ldb:pyldb.c - remove pointless comment
      ldb:ldb.h - reorder controls/extended operations
      s4:libcli/ldap/ldap_controls.c - fix up the controls list
      s4:dsdb - make the RELAX control private
      s4:"wrap_casefold" - move it to "ldb_wrap.c" since it's only used there
      s4:ldb-samba/ldb_wrap.c - fix indentation and trailing whitespaces
      s4:lib/util/util_ldb.c - remove unused "gendb_add_ldif" call
      s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c"
      Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c""
      s4:"util_ldb" - remove some really unused dependancies
      ldb:ldb_tdb.c - improve the error outputs
      ldb:ldb_tdb.c - fix up counter variables
      ldb:"ldb_schema_attribute_by_name_internal" - switch back to 32bit counters
      ldb: always return PROTOCOL_ERROR if an operation is unsupported
      s4:ldap_server - use error code constant
      s4:samdb.py - use a more standard way to get to the domain realm/dns name
      s4:samdb.py - remove a pointless comment
      s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"
      ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int range
      s4:nbt_server - fix a LDB counter type
      libcli/security/access_check.c - fix a memory leak
      ldb:ldb_pack.c - remove superflous "message->elements = NULL"
      ldb:ldb_tdb submodule - use "ldb_msg_new" where appropriate
      ldb:ldb_cache.c - fix memory contexts and memory leaks
      ldb:ldb_index.c - let "ldb_module_oom" generate the return code
      ldb:ldb_index.c - fix some memory leaks
      s4:lib/util/charset/iconv.c - remove a distinction which can never happen
      ldb:ldb_tdb/ldb_cache.c - in this function we don't use LDB return codes
      ldb:ldb_tdb/ldb_cache.c - remove a superflous "talloc_free"
      ldb:ldb_modules.c - if we don't find the associated dynamic object then please close the handle
      ldb:ldb_modules.c - "dlclose" could cause inference on "dlerror"
      tdb: commit the version 1.2.7 signatures
      s4:dns_server - fix counter types
      s4/ldb:introduce the LDB_CONTROL_PROVISION_OID control
      ldb:ldb.h - include a comment that the relax control is mainly used by the OpenLDAP backend
      s4:schema.py - reformat and fix the security descriptor
      s4:provision.py - add the correct "CN=Sites" security descriptor
      create_descriptor.c - fix comment
      s4:dsdb - use the more safe "samdb_msg_add_(u)int*" calls always where possible
      s4:dsdb - use LDB results in "add_time_element" and "add_uint64_element"
      s4:dsdb - remove some calls of "samdb_msg_add_string" when we have talloc'ed strings
      s4:samldb LDB module - assign better memory contexts in some cases
      s4:samldb LDB module - use "uint32_t" for available krbtgt number
      s4:samldb LDB module - fix indentations
      s4:provision_*_references.ldif - "add" and do not "replace" the "wellKnownObjects"
      s4:objectclass_attrs LDB module - deny multi-valued replace requests
      s4:ldap.py - prove the denied multi-valued replace requests
      s4:samldb LDB module - other indentation fixes on error messages
      ldb:gendb_* calls: support a "NULL" resultset parameter
      s4:"samdb_search_count" - introduce a "mem_ctx" parameter
      s4:samr RPC server - remove a somewhat pointless comment
      s4:samr RPC server - "dcesrv_samr_info_DomGeneralInformation" - count always all type of groups
      s4:objectclass_attrs.c - rework to support these special "description" constraints
      s4:ldap.py - enhance and activate the "description" attribute test
      s4:samldb LDB module - enhance the "member"-check trigger
      s4:sam.py - enhance users and groups test
      s4:ldap.py - add a test for attribute ranges - still very basic
      librpc/ndr/ndr.c - fix some counter types
      s4:setup/schema_samba4.ldif - this control isn't used anymore
      s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeName
      s4:samr RPC server - provide the right "ReplicaSourceNodeName"
      s4:samr RPC server - DomainGeneralInformation - never return NULL on the oem name
      s4:samr RPC server - fix indentation of function parameters
      s4:samr RPC server - fix trailing whitespaces
      s4:torture/rpc/samr.c - test the "ReplicaSourceNodeName" only against s3
      s4:torture/rpc/samr.c - fix NTTIME warnings by casts
      s4:extended_dn_store LDB module - fix counter types
      s4:partition_init LDB module - fix counter type
      s4:resolve_oids LDB module - fix counter types
      s4:local_password LDB module - fix typos
      s4:rpc_server/common.h - quiet compilation warnings
      s4:samldb LDB module - "member" trigger
      s4:sam.py - enhance "member" tests
      s4:samr RPC server - the LDB error codes for adding or deleting a group member have changed
      s4:samldb LDB module - adapt the "samldb_prim_group_change" trigger to support multiple "primaryGroupID" modification entries
      s4:sam.py - add a short double swap "primaryGroupID" test
      s4:samldb LDB module - primary group change - free temporary messages to save memory
      s4:samldb LDB module - add a new function which handles special cases for single-valued attribute on SAM modifications
      s4:samldb LDB module - make the "userAccountControl" and "groupType" modify handlers separate functions
      s4:drsuapi RPC server - fix counter variables
      s4:samldb LDB module - check for the number of results after a search operation
      s4:samldb LDB module - implement the "dNSHostName" - "servicePrincipalName" change trigger
      s4:sam.py - add a test for the "dNSHostName" - "servicePrincipalName" update mechanism
      s4:netlogon RPC server - point out that the "LogonGetDomainInfo" "servicePrincipalName" generation is still needed
      s4:dsdb/dns/dns_update.c - increase the timeout for the SPN and DNS update scripts
      s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s
      s4:setup/spn_update_list - reorder and update with other SPNs
      s4:provision - remove the "servicePrincipalName" creation on the DC object
      s4:libnet_join.c - only write the really essential SPNs
      s4:netlogon RPC server - "LogonGetDomainInfo" - always check the LDB return codes
      s4:samldb LDB module - validate "sAMAccountName" modifications
      s4:sam.py - test the "sAMAccountName" attribute
      ldb:tools/ldbtest.c - fix build warning
      s4:torture - suppress printf "%llu" on uint64_t variables warnings
      s4:provision - adapt the "provision" so that SIDs are only set on entry creation
      s4:samldb LDB module - deny "objectSid" modifications
      s4:samldb LDB module - unify objectSid assignment error messages
      s4:sam.py - test "objectSid" modification lockdown
      s4:ldap.py/sam.py - simplify the objectclass specifications
      s4:setup/spn_update_list - the DNS SPN is only used in DNS mode
      s4:samldb LDB module - "sAMAccountName" checker
      s4:samldb LDB module - support now the full "servicePrincipalName" update trigger
      s4:sam.py - additional testing for "servicePrincipalName" updates
      s4:samldb LDB module - the "sAMAccountName" cannot be substituted by nothing
      s4:RPC server - cosmetic fixes - indentation, comments
      s4:RPC server - always set the response pad data in base of the request one
      s4:objectguid LDB module - remove "objectguid_find_attribute"
      s4:objectclass_attrs LDB module - simplify the invoke of the "dSHeuristics" checker
      s4:objectclass_attrs LDB module - refactor the "dSHeuristics" checker
      s4:objectclass LDB module - the structural objectclass has always to be specified
      s4:objectclass_attrs LDB module - introduce the hardcoded delete-protected attributes list
      s4:samldb LDB module - improve the "get_single_valued_attr" call and move it into "ldb_modules/util.c"
      s4:sam.py - assign valid values when performing the special-attributes constraint checks
      s4:descriptor LDB module - a bit cleanup
      s4:ldap.py/passwords.py - just use objectclass "user" for users
      ldb:ldb.h - reorder extended operations list
      s4:password_hash LDB module - fix indentation
      s4:samr RPC server - "dcesrv_samr_RemoveMemberFromForeignDomain"
      ldb:ldb_tdb.c - make "ltdb_add" more similar to "ltdb_modify"
      ldb:ldb_tdb.c - ltdb_check_special_dn - fix indentation
      s4:operational LDB module - "canonicalName" doesn't make use of the "distinguishedName" attribute
      s4:update_keytab LDB module - we don't need to search for the "distinguishedName" attribute
      s4:ldap.py - enhance the "distinguishedName" tests
      ldb:ldb_parse.c - "ldb_parse_hex2char" - always initialise "c"
      s4:descriptor LDB module - don't ignore referrals if we are executing an ordinary external search operation
      s4:descriptor LDB module - remove a "ldb_msg_sanity_check" call
      s4:descriptor LDB module - remove a bit pointless memory context
      s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the default operation callback implementations
      s4:descriptor LDB module - save a pointer to the request message on the temporary "ac" context
      s4:torture/dssync.c - remove unused variable
      ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only the "distinguishedName" one
      s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the attribute fetch also on LDB add operations
      s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully behave as in AD
      s4:upgradeprovision - remove some "recalculate_sd" uses
      s4:objectguid LDB module - objectGUIDs cannot be specified on add operations
      s4:objectguid LDB module - fix typo in output message
      s4:ldap.py - add more "objectGUID" related tests
      s4:drsuapi RPC server - writespn.c - fix indentations
      s4:objectguid LDB module - make use of "dsdb_next_callback"
      s4:objectclass LDB module - no idea why we'd need the "objectGUID" here
      s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updates
      s4:pydsdb.c - introduce Python 2.4 compatibility defines
      s4:pydsdb.c - use "Py_ssize_t" for Python list counters
      ldb:pyldb.c - fix indentation
      ldb:pyldb.c - use "Py_ssize_t" for counting list entries
      ldb:pyldb.c - fix some "Py_ssize_t" output warnings
      ldb:pyldb.c - most of the times "time_t" is defined as "long int"
      ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" error
      ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned int" for the element reference
      s4:passwords.py - add another two failure cases
      s4:acl LDB module - define the delete passwords special case a bit better
      s4:password_hash LDB module - clear the fact that a delete of password attributes isn't possible
      s4:samdb_msg_find_old_and_new_ldb_val - rework
      s4:password_hash LDB module - deleting password attributes is a little more complicated
      s4:passwords.py - test empty password attributes behaviour
      s4:pyldb.c - fix "py_ldb_contains" according to the comment by Jelmer
      s4:password_hash LDB module - introduce a "userPassword" flag which enables/disables the two "userPassword" behaviours
      s4:provision - switch to "clearTextPassword" for setting passwords
      s4:provision.py - strip trailing whitespaces
      s4:provision_self_join.ldif - the object SID in AD is called "objectSid"
      s4:python tests - fix script names in the help text
      s4:speedtest.py - make it executable
      s4:speedtest.py - fix script name in the help text
      s4:speedtest.py - remove duplicated code
      s4:speedtest.py - use "unicodePwd" for setting user's password
      s4:upgradehelpers.py - use "clearTextPassword" rather than "userPassword"
      s4:acl.py - two password change tests are expected to fails on Windows 2000 function level
      s4:selftest/tests.py - skip the "passwords.py" suite on Windows 2000 domain function level
      s4:ldb_modules/util.c - "dsHeuristics" -> "dSHeuristics"
      s4:local_password LDB module - remove schema checking code and fix some typos
      s4:libnet/libnet_samsync_ldb.c - remove "userPassword" remove code
      s4:password_hash LDB module - move "samdb_msg_find_old_and_new_ldb_val" into the password_hash LDB module
      s4:password_hash and acl LDB modules - handle the "userPassword" attribute according to the "dSHeuristics"
      s4:passwords.py - add a test for the normal "userPassword" behaviour
      s4:objectclass LDB module - allow RDNs also to come from superclasses
      s4:dsdb - proof against empty RDN values where expected
      ldb:ldb_ldap.c rename operation - check for the RDN name and value
      s4:pytevent.c - fix a discard const warning
      s4:samldb/objectclass_attrs LDB modules - move "description" logic from "objectclass_attrs" into "samldb"
      s4:repl_meta_data LDB module - convert two debug messages into error messages
      s4:objectclass LDB module - we should not simply ignore additional "objectClass" attribute changes
      s4:objectclass LDB module - multiple "objectClass" change elements are unfortunately still allowed
      s4:upgradeprovision - why not directly use "provision:0"?
      s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password conversion errors
      s4:objectclass LDB module - implement the "objectClass" change restrictions on Windows 2000 forest function level
      s4:objectclass LDB module - improve the default name context checking on modifications
      s4:torture/basic/base.c - fix output warnings regarding "time_t"
      s4:heimdal - fix the return code of a non-void function
      s4:objectclass LDB module - free "nc_root" after name context comparisons
      s4:subtree_rename LDB module - make use of "dsdb_find_nc_root"
      s4:objectclass LDB module - the "olddn" is the special DN for rename requests
      s4:descriptor LDB module - make more clear that special control entries never should be handled by modules
      s4:"dsdb_find_nc_root" - let it work also when the "namingContexts" attribute isn't available yet
      s4:descriptor LDB module - handle the NCs in a more generic way by using "dsdb_find_nc_root"
      s4:descriptor LDB module - also "get_default_ag" should make use of "dsdb_find_nc_root"
      s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the NC-specific checks
      ldb:ldb_dn.c - ldb_dn_explode - free also the extended components on error cases
      ldb:ldb_dn_explode - point out that on error cases "data" is implicitly free'd
      s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests
      s4:repl_meta_data LDB module - allow also special DNs to be renamed correctly
      s4:password_hash LDB module - remove unused headers
      ldb:skel.c - don't introduce trailing whitespaces by a module template
      s4:dsdb python tests - use "ldb.domain_dn"
      Revert "s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests"
      s4:dsdb tests - use even more already defined pyldb functions to retrieve NCs
      s4:torture/ldb/ldb.c - add a small test for a DN with an escaped comma
      s4:netlogon/LogonGetDomainInfo - handle a NULL "dns_hostname"
      ldb:ldb_rename on ldap backends - handle the case when the RDN value is empty
      ldb:rdn_name LDB module - add more RDN name constraints
      s4:acl LDB module - it's more correct to count the password attributes using "unsigned int"
      s4:samldb LDB module - objectclass trigger - reorder template attributes
      s4:objectclass_attrs LDB module - add more delete protected attributes
      s4:repl_meta_data LDB module - move the "objectGUID" checks a bit higher
      s4:repl_meta_data LDB module - fix a counter type
      waf:lib/util - add missing dependency on talloc
      s4:provision_rootdse_add.ldif - add all possible LDAP policy values but outcommented for the moment
      s4:objectclass LDB module - some more or less cosmetic return value macro changes
      s4:objectclass LDB module - move one checks into the "objectclass derivation loop"
      s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified
      s4:lsa RPC server / objectclass LDB module - fix the creation of trusted domain objects
      s4:objectclass LDB module - move the "mem_ctx" allocation to a better place
      s4:objectclass LDB module - simply use "msg" when requesting the message
      s4:rootdse LDB module - remove unused variable
      s4:torture/drs/python/fsmo.py - fix comments and an error message
      s4:dsdb/tests/python/sam.py - we don't need the domain SID
      s4:dsdb tests - make use of "ldb.get_domain_sid()"
      s4:samba3sam LDB module - make the "pw_uid"/"pw_gid" conversion a bit clearer
      s4:samba3sam LDB module - correctly print out an unsigned value
      s4:role transfer - use always type "enum drepl_role_master" for role specifications
      tdb:tdbstore.c - remove an useless '\'
      MAINTAINERS.txt - fix typo
      s4:dsdb/samdb/samdb.h - fix include ordering in order to prevent warnings on Tru64
      s4:libcli/security/session.h - fix include ordering for "enum security_user_level"
      Revert "s4:rpc_server/common/common.h - introduce two forward declarations to suppress parameter declaration warnings"
      s4:wkssvc RPC server - better solution for srvsvc* enum's in server_info.c
      s4:param/secrets.h - fix "enum netr_SchannelType" include correctly
      s4:drsuapi RPC server - fix "enum security_user_level" warning on Tru64
      s4:torture/rpc/samsync.c - remove uninitialised "nt_status" check
      s4:torture/rpc/samr.c - fix uninitialised "status" variables
      s4:lib/registry/rpc.c - remove a duplicate assignment
      s4:dsdb/repl/drepl_out_helpers.c - print out the correct error message (werr)
      s4:drepl_service.c - fix error macro (use "_werr" and not "werr")
      s4:dsdb/repl/drepl_service.c - return the correct WERR result
      tdb:common/open.c - use "discard_const_p" for certain "tdb->name" assignments
      s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object
      s4:dsdb/repl/drepl* - move "lib/messaging/irpc.h" include into "drepl_service.h"
      replace:wscript - change the "bool" checks to be compatible with more platforms
      Revert "s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object"
      replace:wscript - reintroduce the size check for "bool" due to a request of metze
      replace:wscript - change the "bool" checks to be compatible with more platforms
      replace:wscript - reintroduce the size check for "bool" due to a request of metze
      s4:introduce casts before outputs of "time_t" variables
      s4:torture/smb2/acls.c - remove two unused variables
      s4:auth/gensec/gensec_gssapi.c - always print error messages on the same talloc context
      s4:param/pyparam_util.c - remove unused include
      heimdal:base/heimbase.c - remove an unused variable
      s4:auth/ntlmssp/ntlmssp_server.c - remove unnecessary ";"
      s4:torture - remove unreachable statements to quiet warnings of Solaris "cc"
      libcli/security/object_tree.c - remove unreachable statement
      s4:dns_server/dns_update.c - remove unreachable statements
      s4:dcesrv_drsuapi RPC server - remove unreachable statement
      s4:wrepl_server - remove unreachable statement
      s4:auth/gensec/gensec_tstream.c - quiet warnings on Solaris "cc"
      s4:lib/tls/tls_tstream.c - quiet warning on Solaris "cc" by casts
      s4:wrepl_server - add a cast on "iov_base"
      s4:torture - prefer the termination "return"s at the end of two unittests
      s4:torture - partially revert "s4:torture - prefer the termination "return"s at the end of two unittests"
      s4:ranged results LDB module - "rr_search_callback" - change some memory context
      s4:ranged results LDB module - cosmetic - fix some indentation
      ldb:ldb_msg_add_value - fix here a wrong memory context
      s4:dsdb/common/util.c - "samdb_msg_add_add/delval" - introduce also here the better memory context
      s4:dsdb/repl/replicated_objects.c - proof if "talloc_reference" doesn't return NULL
      s4:password_hash LDB module - allow empty ("") passwords
      s4:dsdb/samdb/cracknames.c - fix various KRB5 memory leaks
      s4:auth/sam.c-"authsam_expand_nested_groups" - don't fail if we've memberships on non-SAM objects
      s4:auth/sam.c - specify the SID ignore case better
      s4:auth/sam.c - fix the free of memory contexts
      s4:auth/sam.c - the check for the SAMDB needs to be on the top of the call
      s4:auth/sam.c - when printing out a string buffer we don't strictly need the width
      s4:libnet_JoinADSDomain - move away from "samdb_msg_add_string"
      s4:libnet/libnet_samsync_ldb,c - move away from "samdb_msg_add_string" when possible
      s4:lsa RPC server - "dcesrv_lsa_CreateSecret" - a bit of rework
      s4:lsa RPC server - always initialise "info" structures
      s3/s4:lsa.idl - QueryDomainInformationPolicy - the "unknown6" field is called "reserved"
      s4/kdc - fix a warning regarding a changed parameter type (kvno)
      s4:torture/rpc/samr.c - fix output message
      s4:dsdb/common/util_samr.c - "dsdb_enum_group_mem" - fix it up regarding non SAM members
      s4:samr RPC server - dcesrv_samr_GetBootKeyInformation - return NOT_SUPPORTED
      s4:dsdb/common/util_samr.c and auth/sam.c - fix error message
      s4:auth/kerberos/kerberos_pac.c - fix another memory leak regarding the KRB principal
      s4:auth/gensec/gensec_krb5.c - remove a pointless "nt_status" test
      s4:auth/gensec/gensec_krb5.c - fix/reorder memory free operations
      s4:kdc/kpasswdd.c - fix memory leaks
      s4:dsdb/samdb/cracknames.c - fix another memory leak
      s4:lib/messaging/*.h - fix compile warnings on gcc 3.4
      s4:dsdb/samdb/ldb_modules/util.h - fix a gcc 3.4 compile warning
      s4:cluster/cluster.h - fix another gcc 3.4 "struct" warning
      lib/util:tests/time.c - "test_timestring" - fix it on Solaris
      s4:fix some shadowed declaration warnings on Solaris by renaming the symbols
      s4:client/client.c - fix Solaris warning by a type cast
      s4:torture/locktest.c - fix one indentation
      s4:torture/locktest.c - fix "pid_t" printf warning on Solaris
      lib/util/fault.c - fix "pid_t" printf warning on Solaris
      Revert "lib/util:tests/time.c - "test_timestring" - fix it on Solaris"
      s4:acl_read LDB module - fix attributes list
      s4:libnet_samsync_ldb.c - introduce an error message on failed domain synchronisation
      s4:libnet_samsync_ldb.c - simplify a talloc steal call
      s4:kdc/kpasswdd.c - don't return an uninitialised NT_STATUS
      s4:param/loadparm.c - fix a warning by introducing a "const" cast
      s4:kdc/proxy.c - optimise includes in order to fix a build warning on Tru64
      s4:smbd/process*.c - fix PID warnings on Solaris
      s4:kdc/*.c - minimise includes
      s4:web_server/wsgi.c - add missing Python compatibility code
      s4:web_server/wsgi.c - fix a counter type
      s4:web_server/*.c - optimise includes
      ldb:pyldb - optimise includes
      s4:dsdb/pydsdb.c - clean up memory handling
      s4:lib/ldb-samba/pyldb.c - optimise includes
      s4:dsdb/pydsdb.c and web_server/wsgi.c - remove accidentally introduced Py_RETURN_NONE
      s4:libnet/py_net.c - add checks for OOM conditions
      s4:libcli/finddcs_nbt.c - optimise headers
      s4:libcli/finddc.h - fix header dependancies
      s4:param/provision.c - optimise includes
      s4:scripting/python/pyglue.c - optimise includes
      s4:scripting/python/pyglue.c - add a OOM handling
      ldb:pyldb.h - revert to the previous header behaviour
      s4:dsdb/pydsdb.c - don't throw another exception on "PyObject_AsDn"
      s4:auth/gensec/spnego.c - remove unused variable "principal"
      s4:dsdb/common/util.c - remove unused variable "ndr_err"
      lib/util/asn1.c - remove the "const" specifier from OID
      librpc/ndr/ndr_*.c - remove "const" from OIDs
      s3/s4:auth SPNEGO - adaptions for the removed "const" from OIDs
      s4:lib/ldb-samba/ldif_handlers.c - adaption needed for removed "const" on OIDs
      s4:dsdb/schema/schema_* - adaptions needed for removed "const" on OIDs
      s4:auth/session.h - use a forward declaration for type "struct ldb_context"
      ldb:tools/ldbdel.c - "replace.h" should be the first include
      ldb:pyldb.c - remove unused variable
      lib/util/time.c - make the "strftime" output locale independant ("%c" is not)
      dsdb:ldap.py - transform a test call into the new "msg.add" syntax
      lib/replace/testsuite.c - fix test output
      s4:torture/ndr/spoolss.c - add a "ULL" suffix for a 64 bit unsigned integer literal
      s4:acl LDB module - add a missing "talloc_free(tmp_ctx)" in an error path
      s4:acl LDB module - "acl_rename" - memory contexts fixup

Matthieu Patou (101):
      upgradeprovision: use the same case for hostname in reference provision as in the current provision
      s4 provision: Make GPO folder group writable
      s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo valid
      s4 upgradeprovision: fix a bug with empty reference objects
      s4 provision: start with gpo of version 0 and be consistent between different policies
      upgradeprovision: fix a bug with not updated links
      upgradeprovision: Fix a bug with renamed entries
      upgradeprovision: fix a typo
      s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d583c397b897507689e382)
      heimdal: change the version string
      pyldb: test return code before trying to talloc_steal
      unittests: makes the unit tests for ldb.python back in order
      unittests: add a test to avoid regression on previous fix
      ndr: Handle the case of string array with all null terminated strings
      idl: dfsblobs fix glitches in the implementation
      dfs: Fix wrong size of referral, change order of dc referral
      torture: complete dfs referral tests
      build: make make tests SCREEN=1 work on freebsd
      torture: Add debug on what we are removing
      unit tests: do some cleanup after tests
      s4 rpc_server: fix a build error on freebsd
      s4 dsdb: fix sign problem on PPC and x86
      s4 param: change messaging directory name from messaging to msg
      selftest: correct the import of Time::HighRes
      selftest: use full path for selftest.pl instead of relative paths
      replace: use a wrapper around strtoll if it didn't behave as expected
      replace: use replace for non 'samba' compliant strptime
      waf: Mark the replacement zlib private so that it can build on machine without a system zlib
      replace: restore the order for #define + rep_strtoll
      Add a script for formating test result of st/subunit
      unit tests: remove smb2.dir
      unit tests: move backend testing to the end
      tls: Inform the user if the cert/ca/private key can't be saved
      build: remove warnings about redifinition of boolean use -KPIC on suncc
      build: Add XPG6 otherwise we have a configure pb on sun Solaris
      unit tests: use skip file to exclude smb2.dir instead of hack
      build: add the -fno-common flags to fix the link pb on mac os X
      build: set shared libraries flags correctly on mac os X
      build: strip -single_module when doing bundle on mac OS X
      provision: when deriving netbiosname from hostname force the netbiosname to be compliant
      build: make this test darwin only as it mess a bit more the freebsd build
      build: Remove zlib from the cache if we failed to pass all the tests
      provision: fix wrong tests
      build: check that if we provide -liconv we can build shared libs
      build: In some case the flags for the sun studio linker are wrong
      unit tests: allow make test to correctly and quickly exit in case of problem while provisionning a test environment
      unit tests: remove trailling white spaces
      fix in_screen so that it works on os that don't chdir to $PWD
      Add a script to make backup of samba provision
      Update WHATSNEW4 to add information related to samba_backup
      samldb: relax groupType modification checks
      upgradeprovision: update revision for forestupdate and domainupdate objects
      upgradeprovision: use the (upgrade)provision control also
      upgradeprovision: use the relax/(upgrade)provision when modifying object
      upgradeprovision: fix pb with dns-hostname, regenerate a correct keytab
      upgradeprovision: use relaxed control while adding missing object container
      unit tests: add testing for dns account password change
      Fix typo
      python: use the ldbMessage + modify notation instead of modify_ldif that we try to avoid
      ktpass: fix the search path for when running in samba's source dir
      ktpass: also use userPrincipalName for locating the principal
      selftest: fix tap2subunit detection on system with tap2subunit but not correct subunit libs
      Make log level of the server configurable in make test
      ldb-tdb: Add more information about full scan
      Fix endianess problems as discovered on the build farm
      Add timestamp when running with --maximum-runtime
      remove useless debug message :-)
      build: change compile flags on mac os x if we face pb with common symbols
      add handling for solaris
      fix bad shell
      build: update gdb_backtrace to make it search for gdb66 as it work on freebsd
      tls_tstream: increase the buffer size
      build: fix hpux build pb
      build: tru64 needs -shared for building libs
      smbtorture: use xxxULL notation instead of INT64_C(xxx)
      build: Cope with broken libiconv
      build: do not duplicate the checks for python in samba4
      build: finishing fixing broken libiconv on hpux
      build: introduce SAMBA_CHECK_PYTHON_HEADERS
      build: use CPP and CC values when calling pidl
      pidl: use $CC -E if $CPP is not defined, if both undefined use cpp
      build: detect if conf.env['CPP'] is an array or not
      build: reset cpp on host with xlr_c and let pidl use $CC -E
      build: compiler on aix is xlc_r not xlr_c
      build: add a function to test if -lc is needed
      build: cpp is prefixed by CPP=
      heimdal: unset SLIST_ENTRY only if we are with windows
      build: On AIX we need _XOPEN_SOURCE >= 500 for CLOCK_REALTIME
      build: add a dependency on lib iconv for lib intl if we are not able to find it
      build: add more CFLAGS for aix
      replace: add comments to make the #ifdef/#else/endif more readable
      build: add a check for _ss_family as it used on aix to replace ss_family
      build: change lib order to fix build on netbsd
      change searched name from _ss_family to __ss_family
      build: move the import near the place where need it, so that we can build on hosts with python's zlib
      build: remove -no-undefined and -as-needed on openbsd
      build do not add -no-undefined on openbsd
      wafsamba: change the default value for SAMBA_MODULE of pyembed to False
      build: fix bad syntax
      build: hpux didn't support -Bdynamic
      build: openbsd plateform is openbsd4

Michael Adam (75):
      s3:registry: move higher level function reg_open_path to new module reg_api_util
      s3:registry: move (commented out) hilvl util functions to reg_api_util.c
      s3:registry: move prototypes of unused hilvl functions to ret_api_util.h and comment them out
      s3:services_db: untangle assignments from check in construct_service_sd().
      s3:services_db: untanlge assignments from check in read_init_file().
      s3:services_db: rewrite svcctl_set_secdesc() using reg_api calls instead of legacy
      s3:services_db: rewrite svcctl_set_secdesc to use tmp talloc ctx
      s3:services_db: fix a debug message
      s3:services_db: remove the TALLOC_CTX argument from svcctl_set_secdesc
      s3:services_db: use temp talloc ctx in svcctl_get_secdesc()
      s3:services_db: change svcctl_get_secdesc() to use reg_api functions
      s3:services_db: make svcctl_lookup_dispname() use a temp talloc ctx
      s3:services_db: change svcctl_lookup_dispname() to use reg_api functions
      s3:services_db: rewrite svcctl_lookup_description() to use a tmp talloc ctx
      s3:services_db: change svcctl_lookup_description() to use reg_api functions
      s3:services_db: factor out common code of lookup_dispname and lookup_description
      s3:services_db: publish svcctl_get_string_value()
      s3:srv_ntsvcs_nt: make fill_svc_config() use svcctl_get_string_value()
      s3:rpc_server: registry is not direclty used in the svcctl server any more
      s3:rpc_server:ntsvcs: use svcctl_lookup_dispname instead of legacy svcctl in _PNP_GetDeviceRegProp
      s3:rpc_server:ntsvcs: registry is not directly used an more.
      s3:services_db: remove unused legacy function svcctl_fetch_regvalues().
      s3:services_db: remove bogus comments
      s3:services_db: create the "Security" subkey if it does not exist in svcctl_set_secdesc()
      s3:services_db: extract core of svcctl_set_secdesc to _internal version
      s3:services_db: rewrite svcctl_init_keys() to use reg_api calls instead of legacy
      s3:services_db: does not need legacy registry code any more.
      s3:registry: remove now (finally) obsolete reg_util_registry.{c,h}
      s3:registry: regfio fix the build
      s3:services_db: convert get_common_service_dispname() to talloc
      s3:registry:reg_api: update (C)
      s3:registry: move the reg_api prototypes to their own header.
      s3:registry: move reg_api_regf prototypes to their own header file.
      s3:registry: move prototypes from reg_init_basic.c to their own header.
      s3:registry: move prototype from reg_init_full.c to its own header.
      s3:registry: move prototype from reg_init_smbconf.c to its own header.
      s3:registry: move the reg_db.h from include/ to registry/
      s3:registry: move regio.h from include/ to registry/
      s3:tests: fix misplaced '...' for grep pattern in test_net_registry.sh
      s3:registry: remove unneeded TALLOC_CTX argument from reg_deletekey_recursive
      s3:net: add subcommand net registry deletekey_recursive
      add script to build only the manual pages (not all the docs) - git version
      add script to build only the manpages (not the complete docs) - no-git version
      docs: use abs_top_builddir instead of BUILDDIR to let configure create correct catalog file
      no need any more to create catalog file manually in build-manpages-git
      no need any more to manually create catalog file in build-manpages-nogit
      s3:registry: try to fix the build of reg_parse_internal on HP-UX
      libsmbconf: parse an empty share as empty share, not as NULL.
      s3:registry: fix some trailing spaces in reg_backend_db
      s3:winbindd: fix query_user_list for users with NULL full_name
      s3:winbindd: fix query_user for users with NULL full name.
      util/charset: remove a duplicate comment.
      s3:lib/charcnv: add next_codepoint_ext() that accepts input charset.
      s3:lib/charcnv: reformat comments in next_codepoint_ext()
      s3:lib/charcnv: rename a parameter for clarity in next_codepoint_ext()
      s3:lib/charcnv: clarify comments in next_codepoint_ext()
      s3:lib/util_str: clarify the comment header for strlen_m().
      s3:lib/util_str: add strlen_m_ext() that takes input and output charset
      s3:util_str: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
      lib/charset/charcnv: add next_codepoint_convenience_ext() that accepts input charset.
      lib/charset/charcnv: rename a parameter of next_codepoint_convenience_ext() for clarity
      lib/charcnv/util_unistr: add next_codepoint_ext() that accepts input charset.
      lib/util/charset/util_unistr: add strlen_m_ext that takes input and output charset
      lib/util/charset/util_unistr: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
      lib/util/charset/util_unistr: clarify the comment header for strlen_m().
      lib/util/charset/charconv: clarify comments in next_codepoint_convenience_ext()
      librpc/ndr: use new strlen_m_ext_term() in ndr_charset_length(): fix bug #7594
      s3:smbd: remove some commented out legacy code
      s3:registry: improve debug messages about regdb refcount changes
      docs: clarify the idmap_ad manpage (bug #6322)
      docs: clarify the idmap_rid manpage (bug #7788)
      util_net: fix a comment typo in interpret_string_addr_internal()
      s3:net: disable dynamic dns updates at the end of "net ads join" in a cluster (bug #7871)
      s3:net: add net_update_dns_ext() that accepts a list of addresses as parameter (bug# 7871)
      s3:net ads dns register: add support for specifying addresse on the commandline (bug #7871)

Michael Wood (1):
      Make upgrade procedure more explicit.

Nadezhda Ivanova (72):
      s4-ldap: Fixed a problem with NC's having a parentGUID attribute
      s4-dsdb: Fixed a call to the wrong ops function in dsdb_module_search_dn.
      s4-ldap: Added a control to apply the access checks on read via LDAP
      s4-dsdb: Moved some helper functions to a separate file
      s4-dsdb: A helper to determine if an attribute is part of the search filter
      s4-dsdb: Added a function to check access on a particular object by its guid
      s4-tests: Removed search tests with anonymous credentials as they fail againts Windows
      s4-tests: Added tests for search checks on attributes
      s4-ldbmodules: Added new module aclread to handle access checks on LDAP search
      s4-ldb: Added ldb_request_replace_control
      s4-dsdb: adapted check_access_on_dn for use in drs.
      s4-drs: Added drs_security_access_check function
      s4-drs: Added check for drs-manage-topology to updateRefs.
      s4-rodc: RODC should not accept requests for role transfer
      s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to determine the source of the request
      s4-ldb: Added the correct extended check for read access to nTSecurityDescriptor
      s4-dsdb: Implemented value restrictions for the dSHeuristics attribute
      s4-tests: Tests for the dSHeuristics attribute value restrictions
      s4-tests: Acl tests should use the existing samdb domain_dn method instead of defining a new one
      s4-tests: Descriptor tests should use the existing samdb domain_dn method instead of defining a new one
      s4-tests: Changed acl tests to use existing method in samdb for adding users to a group.
      s4-tests: Changed descriptor tests to use existing method in samdb for adding users to a group.
      s4-tests: Modified acl tests to use pyldb api to retrieve configuration dn.
      s4-tests: Modified descriptor tests to use pyldb api to retrieve configuration and schema dn.
      s4-dsdb: Added a helper to python SamDB for retrieving and setting minPwdAge.
      s4-tests: Adapted acl.py to use set_minPwdAge from SamDB.
      s4-tests: Adapted passwords.py to use set_minPwdAge from SamDB.
      s4-dsdb: Added python helpers for getting and seting dSHeuristics to SamDB
      s4-tests: Acl tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-tests: Password tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-tests: Ldap tests now use the get_dsheuristics and set_dsheuristics from SamDB.
      s4-dsdb: Added a python method to SamDB for creating organizationalUnits
      s4-tests: Modified acl.py to use SamDB.create_ou()
      s4-tests: Modified sec_descriptor.py to use SamDB.create_ou()
      s4-dsdb: Extended samdb.newuser to accept security descriptor for the object and optionally skip password reset
      s4-tests: Modified acl.py to use samdb.newuser instead of custom methods.
      s4-tests: Modified sec_descriptor.py to use samdb.newuser instead of custom methods.
      s4-dsdb: Changed filter to find the account of a user by samAccountName
      s4-tests: Modified acl.py to use samdb.newgroup instead of custom methods.
      s4-dsdb: Extended samdb.newgroup to set the group's security descriptor.
      s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally defined method.
      s4-tests: Added a common definition of delete_force.
      s4-tests: Modified acly.py to use common delete_force instead of defining its own.
      s4-tests: Modified bind.py to use samba.tests.delete_force
      s4-tests: Modified deletetest.py to use samba.tests.delete_force
      s4-tests: Modified ldap.py to use samba.tests.delete_force
      s4-tests: Modified ldap_schema.py to use samba.tests.delete_force
      s4-tests: delete_force was unused, removed it.
      s4-tests: Modified passwords.py to use samba.tests.delete_force
      s4-tests: Modified sam.py to use samba.tests.delete_force
      s4-tests: Modified sec_descriptor.py to use samba.tests.delete_force
      s4-tests: Modified speedtest.py to use samba.tests.delete_force
      s4-dsdb: Fixed wrong assignment of name attribute to description atribute in create_ou.
      s4-dsdb: Switched to using a dictionary in create_ou for consistency.
      s4-tests: Modified create_ou to only accept security.descriptor type for sd to avoid confusion
      s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulated
      s4-acl: Moved aclread module below descriptor and acl.
      s4-acl: Some optimisation of the aclread module
      s4-acl: Remove unused variables from aclread module.
      s4-acl: Added a flag to mark an element as failing an access check.
      s4-acl: Changed the mechanism of attribute removal to speed it up.
      s4-acl: Fixed incorrect value of LDB_FLAG_INTERNAL_INACCESSIBLE_ATTRIBUTE
      s4-acl: Replaced talloc_reference with talloc_steal, as aclread is the only one using this result message.
      s4-tests: Moved some commonly redefined security descriptor methods to a utils class
      s4-tests: Modified acl.py to use the sd_utils helpers.
      s4-tests: Modified sec_descriptor.py to use the sd_utils helpers.
      s4-dsdb: Fixed incorrect LDAP return code when anonymous login is used.
      s4-tests: Added tests for LDAP add/delete/modify using anonymous login.
      s4-tests: Added a speedtest for LDAP search operations with different accounts.
      s4-dsdb: Added a helper function to get the default dns domain as string.
      s4-acl: Implementation of Validated-SPN validated write
      s4-tests: Tests for Validated-SPN implementation.

Philip M. White (1):
      s4:waf - fix the build on Gentoo platforms

Ricardo Jorge (1):
      pyrpc: Build the samba.dcerpc.srvsvc module.

Rusty Russell (7):
      Really enable core dumps in Linux
      tdb: add Bob Jenkins lookup3 hash as helper hash.
      tdb: automatically identify Jenkins hash tdbs
      tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash.
      tdb: fix non-WAF build, commit 1.2.6 ABI file.
      idtree: fix right shift of signed ints, crash on large ids on AIX
      idtree: fix overflow for v. large ids on allocation and removal

Samba-JP oota (2):
      This is typo fix patch for smbcacls.1.xml .
      s3-docs: Update 3.2 features.

Simo Sorce (21):
      s3-dcerpc: move crypto stuff in /librpc/crypto
      gssapi: avoid explicit dependency on dcerpc specific structures
      gssapi: remove unused function argument
      s3-dcerpc: add server helpers for ntlmssp auth
      s3-dcesrv: use ntlmssp helper in srv_pipe.c
      s3-dcerpc: add server helpers for gssapi auth
      s3-dcesrv: use gssapi helper in srv_pipe.c
      spnego: avoid explicit dependency on dcerpc specific structures
      s3-dcerpc: move client spnego stuff in /librpc/crypto
      spnego: make spnego_context public
      s3-dcerpc: add spnego server helpers
      s3-dcerpc: use new spnego server code
      s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_data
      srv_pipe: reorganize code so that related functions are close to each other
      s3-dcerpc: make auth context opaque
      s3-dcerpc: remove auth_data_free_func
      libcli: fix compile warning
      s3-dcerpc: Use spnego own sign/seal functions
      s3-dcerps: check auth_type
      talloc: make header C++ safe
      ldb: error out when modules are not found

Stefan Metzmacher (191):
      s3:rpc_client: allow DCERPC_PKT_AUTH3 via rpc_api_pipe_send/recv
      s3:rpc_client: rpc_pipe_bind_step_one_done() doesn't need reply_pdu
      s3:rpc_client: use rpc_api_pipe_send() for auth3
      s3:rpc_client: remove unused rpc_pipe_set_hnd_state()
      waf: fix typos in GIT_COMMIT_* strings
      waf: add a '+' to the git hash if the working tree isn't clean
      s4:irpc: add padding to the IPRC header for 8 byte alignment
      s4:irpc: use LIBNDR_FLAG_REF_ALLOC for the server side when pulling
      s4:dsdb/kcc: we don't need to manually allocate [out,ref] pointers anymore
      pidl:NDR/Parser: fix range() for arrays
      libcli/util: let tstream_read_pdu_blob_* cope with variable length headers
      lib/util/asn1: add asn1_peek_tag_needed_size() and asn1_peek_full_tag()
      libcli/ldap: let ldap_full_packet() use asn1_peek_tag_needed_size()
      s4:schannel: handle move flag combinations in the server
      lib/util: change tevent_req_nterror() to a macro
      libcli/ldap: correctly marshall LDAP Unbind PDUs
      s4:libcli/ldap: fix sending oneway requests
      LDAP-BASIC: test AbandonRequest
      s4:torture/ldap: close connections with an UnbindRequest
      s4:irpc: optionaly pass the security_token via IRPC requests.
      tsocket: make sure we delete the fd event before calling close()
      s4:rpc_server: use SOCKET_FLAG_NOCLOSE to avoid calling close() on the socket fd twice.
      s4:wrepl_server: use SOCKET_FLAG_NOCLOSE instead of a dup()
      s4:gensec: add gensec_create_tstream()
      s4:lib/tls: add gnutls backend for tstream
      s4:gensec_tstream: remove plain socket handling
      pidl/Typelist: let typeIs() do TYPEDEF dereference in the HASH case
      pidl/Python: remove todo handling from PythonFunction(), it's done by the caller
      pidl:NDR/Client.pm: remove unreached code
      pidl/Python: use has_property($d, "noopnum") helper function
      pidl: remove unused async property handling
      librpc/ndr: remove 'async' from ndr_interface_call
      pidl:NDR/Client: make the generated code look a bit nicer
      pidl:NDR/Parser: simplify logic in ParseMemCtxPullFlags()
      pidl:NDR/Parser: remove unused code for array element index
      pidl: add support for pointers in typedefs
      testprogs/win32: add vs2010-metze.cmd
      midltests: move the current implementation to midltests_simple.exe
      midltests: add a midltests_tcp.exe tool
      midltests: make it possible to allow downgrades to NDR32
      midltests: add some usefull defines to midltests.idl
      midltests: add midltests-pipe-sync-ndr32-downgrade-01.idl example
      midltests/todo: add some random idl files I had tested month ago
      midltests: revert to a simple default midltests.idl
      midltests: improve NDR64 downgrade
      midltests: print out the alloc_hint for requests and responses
      midltests: support for fragmented RPC traffic
      midltests: add midltests-pipe-sync-ndr32-downgrade-02.idl
      netlogon.idl: add missing flags to DSGETDC_VALID_FLAGS
      s4:rpc_server/netlogon: don't use dcerpc_binding_handle_call_send/recv() directly
      s4:rpc_server/echo: fix compiler warning
      tsocket: make sure we delete the fd event before calling close()
      libcli/ldap: ldap_full_packet() requires at least 6 bytes
      lib/util/asn1: let asn1_peek_full_tag() return an error if we fail to parse tag hdr/len
      s4:ldap_server: rewrite to socket layer to use tstream
      Revert "s4:ldap_server: rewrite to socket layer to use tstream"
      s4:lib/tls: fix enabled logic in tstream_tls_params_server()
      s4:lib/tls: make more clear what the immediate event is for
      s4:lib/tls: buffer writes in tstream_tls_push_function()
      s4:ldap_server: rewrite to socket layer to use tstream
      socket_wrapper: Make it work on freebsd for udp packets
      librpc: Fixed memory context of dcerpc_binding_from_tower.
      libcli/util: add pipe related NT_STATUS_RPC_* codes
      s3:libsmb: add pipe related NT_STATUS_RPC_* codes
      s4:libcli/util: add pipe related NT_STATUS_RPC_* codes
      s4:nbt_server/wins: fix compiler warnings
      s4:nbt_server/winsclient: add a nbtd_wins_refresh_state
      libcli/nbt: move nbt_name_refresh_wins_send() to the top of all nbt_name_refresh_wins_* related code
      libcli/nbt: s/refresh_wins_state/nbt_name_refresh_wins_state
      libcli/nbt: s/name_refresh_wins_handler/nbt_name_refresh_wins_handler
      libcli/nbt: convert nbt_name_refresh_wins_send/recv to tevent_req
      s4:nbt_server/winsclient: add a nbtd_wins_register_state
      libcli/nbt: move nbt_name_register_wins_send() to the top of all nbt_name_register_wins_* related code
      libcli/nbt: s/register_wins_state/nbt_name_register_wins_state
      libcli/nbt: s/name_register_wins_handler/nbt_name_register_wins_handler
      libcli/nbt: convert nbt_name_register_wins_send/recv to tevent_req
      s4:nbt_server/register: add a nbtd_register_name_state
      libcli/nbt: move nbt_name_register_bcast_send to the top of nbt_name_register_bcast_*
      libcli/nbt: s/register_bcast_state/nbt_name_register_bcast_state/
      libcli/nbt: s/name_register_bcast_handler/nbt_name_register_bcast_handler
      libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_req
      libcli/nbt: we don't need LIBCLI_COMPOSITE anymore
      lib/replace: fix rep_strtoull() prototype
      lib/replace: use snprintf() in test code to avoid warnings in the IBM-Checker
      tsocket: ask the kernel for the specific local address after a tcp connect
      tsocket: let tstream_inet_tcp_connect_recv() optionally return the used local address
      misc.idl: add SEC_CHAN_LOCAL and SEC_CHAN_LANMAN
      s4:rpc_server/netlogon: netr_GetDcName should return WERR_DCNOTFOUND for invalid names
      s4:rpc_server/netlogon: validate flags in netr_DsRGetDCNameEx2() and callers
      s4:rpc_server/netlogon: handle DC_RETURN_NETBIOS and DC_RETURN_DNS in netr_DsRGetDCNameEx2()
      s4:rpc_server/netlogon: fix comment in netr_DsRGetDCName()
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should check the challenge after the account
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should reject invalid sec_channel_types early
      s4:rpc_server/netlogon: netr_ServerAuthenticate3 should return NO_TRUST_SAM_ACCOUNT
      s4 dns: Parse srv and soa records
      s4:librpc: we don't need dcerpc client bindings for dns.idl
      midltests: add more union_align examples
      pidl:Samba4/NDR/Parser: fix NDR64 union alignment
      s3:include: move MAX_DEBUG_LEVEL from local.h to debug.h
      s3:include: move debug.c prototypes to debug.h
      talloc: pytalloc should not depend on samba specific code
      autobuild: run ldb tests with TDB_NO_FSYNC=1
      autobuild: add some comments
      s4-waf: don't generate PACKAGE_* defines in config.h
      s3-waf: use git to calculate the version if available
      s3-waf: add NDR_STANDARD dependencies to fix the build
      s3-waf: use NDR_NTLMSSP subsystem
      s3-waf: use NDR_SCHANNEL
      s3-waf: use NDR_NETLOGON for ntlm_auth
      s3-waf: implement LIBMSRPC_GEN as tiny wrapper of 'NDR_STANDARD NDR_DSSETUP NDR_SPOOLSS'
      s4:librpc: we don't need dcerpc client bindings for dns.idl
      lib/util: remove useless ../lib/util/mutex.*
      wafsamba: support 'soname' attribute on SAMBA_LIBRARY()
      talloc: fix waf build for libtalloc-compat1
      MAINTAINERS: add myself as maintainer for tevent and tsocket
      s4:dsdb/tests/python/sam.py: test with member: <SID=...>
      s4:dsdb/samldb: avoid nested unindexed searches in samldb_member_check()
      replace/wscript: check for uint8_t
      replace/wscript: define bool to int instead of off_t
      replace/wscript: do the size checks directly after the type checks
      replace/wscript: add size checks for stdint.h types
      s4:dsdb/kcc: fix memory leak in kcctpl_copy_output_edges()
      s4:dsdb/common: fix memory leak in samdb_ntds_settings_dn()
      s4:dsdb/samdb: optimize samldb_prim_group_change()
      s4:dsdb/objectclass_attrs: not all objects have delete protected attributes as must contain
      s4:dsdb/drepl_notify: reuse dreplsrv_notify_operation structures
      tsocket: fill in sa.sa_len if the system supports it
      socket_wrapper: fill in sa.sa_len if the system supports it
      s4:DRS-RPC-DSSYNC: don't try to decrypt secret attributes twice
      s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret attributes
      s4:rpc_server/drsuapi: let dcesrv_drsuapi_DsGetNCChanges() use DSDB_SECRET_ATTRIBUTES
      s4:rpc_server/drsuapi: make msg_attrs static const
      s4:rpc_server/drsuapi: don't ask for constructed "distinguishedName" if we don't use it
      s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTES
      s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static const
      s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTES
      s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()
      s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()
      tdb: set tdb->name early, as it's needed for tdb_name()
      buildtools: fix --git-local-changes option
      talloc: add ABI/talloc-2.0.4.sigs
      tls_tstream: use a dynamic buffer for the push case
      lib/torture: add torture_assert_u64_equal_goto()
      s3:ntlm_auth: fix memory leak in the raw ntlmssp code path
      s3:ntlm_auth: free session key, as we don't use it (at least for now)
      s3:ntlm_auth: support clients which offer a spnego mechs we don't support
      libcli/auth: let spnego_write_mech_types() check the asn1_load() return
      buildtools: make sure we have no '+' in the version scripts
      buildtools: add the PRIVATE_EXTENSION for private libraries
      buildtools: private_libraries should not have a version in the soname
      s4:python: add PyString_FromStringOrNULL() to pyrpc_util
      pidl:Samba4/Python.pm: use PyString_FromStringOrNULL() from pyrpc_util
      talloc: remove unused PyString_FromString_check_null() from pytalloc-util
      talloc: mark pytalloc-util functions as _PUBLIC_
      talloc: build pytalloc-util with the same logic as libtalloc
      s4:ldb: build libldb and pyldb-util as private libraries when building for samba4
      s4:ldb: add ABI/ldb-0.9.20.sigs
      dcerpc.idl: fix typo 0x800000000 => 0x80000000
      talloc: pytalloc-util should not have an ABI-file yet
      s4:pyrpc_util: s/typename/type_name to avoid c++ warnings
      pidl:Samba4/Python.pm: don't handle scalar reference types special
      pidl:Samba4/Python.pm: ignore "SUBCONTEXT" levels
      drsblobs.idl: remove nopython from package_PrimaryKerberosBlob related stuff
      libcli/echo: lowercase testsuite names
      s4:selftest: use correct name for the test "ECHO-UDP" => "echo.udp"
      libcli/echo: fix off by 1 crash bug
      s4:heimdal_build: replace '+' by '_' for vscripts in HEIMDAL_LIBRARY()
      s3:selftest: fix knownfail for samba3.posix_s3.rpc.spoolss.*printserver.enum_printers_old
      s4:dsdb:util: dsdb_get_single_valued_attr() only needs a const ldb_messages
      s4:ldap_server: rename helper functions to ldapsrv_ prefix and pass ldapsrv_call
      s4:ldap_server: don't call ldb_req_mark_untrusted() on the privileged ldapi socket
      s4:ldap_controls: allow DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID over sockets.
      s4:dsdb:password_hash: verify content if the BYPASS_PASSWORD_HASH control is used
      s4:gensec/spnego: only look at the optimistic token if we support the first mech
      s3:libsmb: add cli_np_tstream.c
      s3:libsmb: add tstream_is_cli_np()
      s3:libsmb: add tstream_cli_np_use_trans() and the needed logic
      s3:libsmb: add tstream_cli_np_set_timeout()
      s3:libsmb: add tstream_cli_np_get_cli_state()
      s3:rpc_client: let rpc_transport_tstream_init() create read and write queue
      s3:rpc_client/rpc_transport_tstream: timeout should be unsigned int
      s3:rpc_client/rpc_transport_tstream.c: add some logic to handle cli_np tstreams
      s3:rpc_client: implement rpc_transport_sock_init() on top of rpc_transport_tstream_init()
      s3:rpc_client: implement rpc_transport_np_init() on top of rpc_transport_tstream_init()
      s3:net ads dns register: use "cluster addresses" option if configured (bug #7871)
      s3:cli_np_tstream: if SMBtrans is desired, the readv needs to wait for the last writev chunk.
      s3:libsmb/namequery.c: don't leak 'pserver'
      s3:lib/gencache: fix memory leak in error path
      s3:libsmb: use 16 zero bytes as channel binding checksum in the gssapi checksum (bug #7883)
      tevent: add ABI/tevent-0.9.10.sigs
      tdb: add ABI/tdb-1.2.8.sigs

Steven Danneman (3):
      s4:libcli:smb2 Rename pending_id to async_id and make 64-bit
      s3:events: Call all ready fd event handlers on each iteration of the main loop
      s3:smbd: Increase unsupported IOCTL debug message to 2

Sumit Bose (1):
      Fix array size of  a memmber of struct cli_ulogoff_state

Sven Neumann (1):
      Fix bug 7754 - samba uses index(), marked as legacy.

Tim Potter (2):
      Fix some warnings at higher -W levels in pidl generated code.
      Include misc.idl for policy_handle in srvsvc.idl.

Volker Lendecke (255):
      s3: Wrap the ntlm_auth loop with a talloc_stackframe
      s3: Split off output generation from manage_squid_ntlmssp_request
      s3: Fall back to raw NTLMSSP for the gss-spnego protocol
      s3: Correctly unwrap the krb ticket in gss-spnego
      s3: Add the PAC info3 struct to the netsamlogon_cache in ntlm_auth
      s3: Fix some nonempty blank lines
      s3: Fix bug 7688, rpcclient command line completion crashing
      s3: Add a missing prototype
      s3: Fix the charset_pull routine (bug 7531)
      s3: Remove a pointless if-statement
      s3: Remove a global variable in bugfix for bug 7665
      s3: Fix pam_smbpass logging on FreeBSD
      s3: Use asprintf where appropriate
      s3: tdbdump does not use our libs
      tdb: add restore
      talloc: Add a warning about talloc_autofree_context() and dlclose()
      s3: Fix bug 7470
      s3: Fix some 64-bit warnings
      s3: Fix a typo
      s3: Remove talloc_autofree_context() from init_system_info()
      s3: Fix a memleak in make_new_server_info_system()
      s3: Lift talloc_autofree_context() from make_auth_context()
      s3: Lift talloc_autofree_context() from make_auth_context_text_list()
      s3: Lift talloc_autofree_context() from make_auth_context_subsystem()
      s3: Lift talloc_autofree_context() from make_auth_context_fixed()
      s3: Avoid an explicit ZERO_STRUCT
      s3: Remove talloc_autofree_context() from get_root_nt_token()
      s3: Remove talloc_autofree_context() from ctdb_read_req()
      s3: Remove talloc_autofree_context() from messaging_tdb_parent_init()
      s3: Remove talloc_autofree_context() from serverid_parent_init()
      s3: Remove talloc_autofree_context() from serverid_db()
      s3: Remove two talloc_autofree_context() calls
      s3: Remove talloc_autofree_context() from pdb_init_ads()
      s3: Remove talloc_autofree_context() from lookup_unix_user_name()
      s3: Remove talloc_autofree_context() from net_sam_provision()
      s3: Remove talloc_autofree_context() from smbpasswd
      s3: Remove talloc_autofree_context() from swat
      s3: Remove talloc_autofree_context() from change_to_guest()
      s3: Remove talloc_autofree_context() from notify_internal_parent_init()
      s3: Remove talloc_autofree_context() from getpwnam_alloc()
      s3: Remove talloc_autofree_context() from guest_user_info()
      s3: Remove talloc_autofree_context() from nametouid()
      Lift talloc_autofree_context() from OpenConfFile()
      Remove talloc_autofree_context() from pm_process
      s3: Fix some comments
      s3: Remove some unused code
      s3: Make file_fnum static
      s3: Remove talloc_autofree_context() from receive_unexpected()
      s3: Remove "server_fd" global variable
      s3: Move "Files" to smbd_server_connection
      s3: Lift smbd_server_conn from file_fnum
      s3: Remove smbd_server_conn from file_new and file_free
      s3: Remove smbd_server_conn from file_close_conn
      s3: Remove smbd_server_conn from file_close_pid
      s3: Remove smbd_server_conn from file_close_user
      s3: Remove smbd_server_conn from files_forall
      s3: Lift smbd_server_conn from file_find_dif
      s3: Lift smbd_server_conn from file_find_di_first
      s3: Remove smbd_server_conn from file_find_subpath
      s3: Remove smbd_server_conn from file_sync_all
      s3: Slightly simplify file_fnum
      s3: Remove smbd_server_conn from file_fsp
      s3: Lift smbd_server_conn from file_find_fd
      s3: Remove talloc_autofree_context() from files.c
      s3: Remove some remaining files.c globals to sconn
      s3: Remove talloc_autofree_context() from myhostname()
      s3: Remove two calls to procid_self()
      s3: Lift smbd_messaging_context() from open_sockets_smbd()
      s3: Increase the debuglevel for connection termination msgs
      s3: Attempt to fix bug 7518
      s3: Fix a typo in dump-domain-list smbcontrol usage msg
      s3: Re-introduce a procid_self()
      s3: Add "smbcontrol winbindd ip-dropped <local-ip>"
      s3: Fix a 64-bit BUG
      s3: Attempt to fix bug 7665
      s3: Attempt to fix the non-ads build
      s3: Remove talloc_autofree_context from pdb_interface
      s3: Remove talloc_autofree_context() from srv_samr_nt.c
      s3: Remove talloc_autofree_context() from unexpected.c
      s3: Remove talloc_autofree_context() from dmapi.c
      s3: Attempt to fix a ton of warnings on the build farm
      s3: Attempt to fix the IRIX build
      s3: Move #define VALGRIND to config.h
      s3: I thought I had compiled this....
      s3: Add msg_ctx_to_sconn
      s3: Lift smbd_server_conn from initial_break_processing
      s3: Remove smbd_server_conn from process_oplock_async_level2_break_message
      s3: Remove smbd_server_conn from process_oplock_break_message
      s3: Remove smbd_server_conn from process_kernel_oplock_break
      s3: Remove smbd_server_conn from smb2 receive_unlock_msg
      s3: Remove smbd_server_conn from msg_close_file
      s3: Remove smbd_server_conn from validate_my_share_entries
      s3: Remove smbd_server_conn from msg_file_was_renamed
      s3: Remove smbd_server_conn from smb1 receive_unlock_msg
      s3: Remove smbd_server_conn from process_blocking_lock_cancel_message
      s3: Remove smbd_server_conn from msg_force_tdis
      s3: Attempt to get the Tru64 build a bit further
      s3: Fix a pointer error
      s3: Stop using the write cache after an oplock break
      s3: Make the write end of the echo responder pipe non-blocking
      tevent: Only call handlers that ask for events
      s3: Fix the async echo responder for netbios keepalives
      s3: Fix input check in is_encrypted_packet
      Move talloc_enable_null_tracking() to the s3 daemons
      tevent: Do not use talloc_autofree_context
      s3: Implement echo_TestSleep
      s3: Add a little test for the echo responder
      s3: Remove talloc_autofree_context() from loadparm.c
      s3: Remove talloc_autofree_context() from get_printer_list_db()
      s3: Call printer_list_parent_init in the parent
      s3: Hang the linux kernel oplocks off the NULL ctx
      s3: Hang the irix kernel oplocks off the NULL ctx
      s3: Hang the isilon kernel oplocks off the NULL context
      s3: Rename "conn" to the more used "sconn" in process_smb()
      s3: Remove some explicit smbd_server_conn refs in process_smb()
      s3: Lift smbd_server_conn from receive_smb_raw_talloc_partial_read
      s3: Lift smbd_server_conn from receive_smb_raw_talloc
      s3: Lift smbd_server_conn from receive_smb_talloc
      s3: Remove smbd_server_conn from construct_reply
      s3: Cope with EINTR in smbd_[un]lock_socket
      s3: Add some DEBUG
      uid_wrapper: The gid wrapper does not require a destructor
      s3: Don't use talloc_autofree_context in map_file
      s3: Add any_nt_status_not_ok
      s3: Use any_nt_status_not_ok in winbind
      s3: Make "unpack_pjob" static
      s3: Rename cli_fileinfo() to cli_fileinfo_basic()
      s3: Add async cli_qfileinfo
      s3: Convert cli_qfilename to cli_qfileinfo
      s3: Convert cli_qfileinfo_basic to cli_qfileinfo
      s3: Replace cli_qfileinfo_test with a call to cli_qfileinfo
      s3: Remove unused cli_get_ea_list_fnum
      s3: Initialize output vars in parse_ea_blob
      Add print_asc_cb()
      Add dump_data_cb()
      s3: Add "geteas" to smbclient
      s3: Add "setea" to smbclient
      s3: Add async cli_setpathinfo
      s3: Pass down a level instead of a flag to cli_posix_link_internal
      s3: Use tevent_req_simple_recv_ntstatus where appropriate
      s3: Use cli_setpathinfo in cli_posix_link_internal
      s3: Use cli_setpathinfo in cli_posix_chown_chmod_internal
      s3: Avoid passing down a boolean to cli_posix_unlink_internal_send
      s3: Use cli_setpathinfo in cli_posix_unlink_internal
      s3: Pass tdb_flags to ctdbd when attaching to a db
      s3: Package tdbrestore in RHEL-CTDB
      s3: Fix some DEBUG msgs
      s3: Make gpfs winattrs work again
      s3: FILE_WRITE_DATA & friends have gone from includes.h
      s3: Fix the registry upgrade code
      s3: Streamline regdb_normalize_keynames_fn a bit
      s3: Fix a typo in a DEBUG msg
      s3: Do not connect to ctdb if it is blocked for some reason
      s3: Add "net registry getvaluesraw"
      s3: Fix a getgrent crash with many groups
      s3: Align nttrans replies the same way Windows does it
      s3: Remove an unused prototype
      s3: Remove the use of cli_send_trans from cli_get_fs_full_size_info
      s3: Allow disabling of mdns registrations
      s3: Remove some duplicate prototypes
      s3: Fix a typo
      s3: Make proper use of sid_check_is_in_xx routines
      s3: Consistently use stdbool types in new code
      s3: Put some parentheses around conditionals
      s3: Build idmap_autorid by default
      s3: Fix an uninitialized variable
      raw.h is only needed in the S4 build
      s3: Package autorid module
      s3: Quieten a bogus error message
      s3: Untangle an if-expression
      s3: Remove some dead code
      s3: Make split_dfs_path return bool
      s3: cli_dfs_check_error does not need to depend on cli->inbuf
      s3: Convert cli_dfs_get_referral to cli_trans
      s3: Convert cli_set_ea() to cli_trans()
      s3: Remove two pointless variables
      s3: Make cli_set_ea_path return NTSTATUS
      s3: Make cli_set_ea_fnum return NTSTATUS
      s3: Well... Fix a stupid error
      s3: Convert cli_get_posix_fs_info() to cli_trans()
      s3: Avoid two calls cli_errstr
      s3: string_to_sid does thorough syntax checking
      s3: Remove some unused code
      s3: Move parse_sidlist to the only calling file
      "bool ? true : false" is a bit pointless
      s3: Remove a reference to "winbindd_cli_state" from append_auth_data
      s3: Remove a reference to "winbindd_cli_state" from append_unix_username
      s3: Remove a reference to "winbindd_cli_state" from append_info3_as_ndr
      s3: Remove a reference to "winbindd_cli_state" from append_afs_token
      s3: Remove a reference to "winbindd_cli_state" from append_info3_as_txt
      s3: Remove a reference to "winbindd_cli_state" from append_auth_data
      s3: Fix a missing return value
      s3: Make winbind recover from a signing error
      s3: Call sid_check_is_domain instead of dom_sid_equal
      s3: Remove some unused code
      s3: Make ads_do_search_retry_args() static
      s3: Remove unused ads_search_retry_extended_dn
      s3: Fix some nonempty blank lines
      s3: Make ads_ranged_search_internal static
      s3: Make ads_get_attrnames_by_oids static
      s3: Remove unused ads_get_attrname_by_oid
      s3: Remove a #define used just once
      s3: Use sid_check_is..
      s3: Fix some typos
      s3: Add a word of warning about "winbind use default domain"
      s3: Correctly calculate the wbinfo -s result
      s3: Fix filling in the pam_auth_crap domain name
      s3: Return the correct result from winbindd_dual_auth_passdb
      libwbclient: Fix a division by zero
      libwbclient: Correctly order the wbcAllocateMemory args
      s3: Use localtime_r, libreplace defines it
      s3: Add gencache_parse
      s3: Convert gencache_get_data_blob to gencache_parse
      s3: Add gencache_iterate_blobs
      s3: Properly print binary values "net cache"
      s3: Add cli_shadow_copy_data
      s3: Add shadow copy info to smbclient allinfo
      s3: Fix bug 7832
      s3: Attempt to fix the shadow_copy2 module
      s3: Fix a typo
      s3: Attempt to please autobuild
      s3: Fix bug 7841: WINBINDD_LOOKUPRIDS asks the wrong domain
      s3: Fix bug 7842: WINBIND_LOOKUPRIDS does not return the proper domain name
      s3: Fix bug 7844: Race in winbind
      s3: Fix serverid_exists
      s3: Add -P as an alias for --ping-dc
      s3: Document wbinfo -P/--ping-dc
      s3: Fix some typos
      s3: re-add some debugs to check_reduced_name
      s3: Did I say this module is from hell?
      s3: Fix some nonempty blank lines
      s3: Reply correctly to FSCTL_IS_VOLUME_DIRTY
      s3: FreeBSD has getpeereid(), use it
      s3: Remove two pointless slprintf calls
      s3: netsamlogon_clear_cached_user only needs the SID
      s3: wcache_invalidate_samlogon only needs the SID
      libwbclient: Put the wb_reqtrans definitions into wb_reqtrans.h
      Move wbc_async.[ch] to its only user: smbtorture3
      wb_reqtrans is not used in libwbclient
      s3: Use the right uid winbindd_raw_kerberos_login()
      s3: Fix bug 7066 -- wbcAuthenticateEx gives unix times
      s3: "make etags" should not grow TAGS infinitely...
      lib: Protect against tevent nterror mismatches
      s3: Remove some unused variables
      s3: Always retry the DC connection in auth_domain
      s3: Remove unused "retry" from cli_full_connection
      s3: Remove unused "retry" from cli_start_connection
      s3: Add some const to name_mangle()
      s3: Add async cli_session_request
      s3: Add an async smbsock_connect
      s3: Add smbsock_any_connect
      s3: Test smbsock_any_connect
      s3: Retry *SMBSERVER in nb_connect
      s3: Use smbsock_any_connect in winbind
      s3: Remove unused open_any_socket_out

Volodymyr Khomenko (1):
      s3: Fix bug 7759

Wilco Baan Hofman (12):
      Fix registry parsing of strings to also support the windows method.
      Fix .reg file format parsing.
      Make sure that regf only writes to disk every five seconds or when flushed or destroyed
      Make sure we write the value stored in value, not line (doublequoted).
      Fix hex():00,00,00 bugs and strtol dword bugs, these values are explicitly hex.
      Do not include the closing doublequote in .reg files.
      The root key should be created as a root key, not subkey.
      5 uint32_t's should be set, not 5 bytes.
      Fix registry editor to be compatible with Windows 7.
      Fix patchfile_dotreg to write proper .reg files: 'hex(1..B):', 'dword:', etc
      Fix issues addressed by Jelmer:
      Make sure REG_SZ is properly written to a .reg file (not as hex(1)), fix trailing comma REG_BINARY.

Zahari Zahariev (4):
      LDAPCmp feature to compare nTSecurityDescriptors
      Speed test with user objects
      Cannot create OU using custom Schema class
      Typos in wintest

olivier (1):
      switch from mtime to ctime which is more reliable if files can be accessed outside samba as well

wilco at baanhofman.nl (4):
      Add python bindings for open_hive function to be able to load REGF files.
      Fix crash when no subkeys exist. Fix writing outside of buffer error by regf backend.
      Fix file corruption (non-updated header) on new allocation.
      Fix regf.idl, subkey and rootkey types were switched.


Samba Shared Repository

More information about the samba-cvs mailing list