[SCM] Samba Shared Repository - annotated tag release-alpha-4-0-0alpha14 created
Jelmer Vernooij
jelmer at samba.org
Thu Dec 23 18:07:31 MST 2010
The annotated tag, release-alpha-4-0-0alpha14 has been created
at 6dbc515d963039e0f11fe0109d36e2a017c18275 (tag)
tagging 0eded28c2371adb356fc6c48185455fd6257c0c5 (commit)
replaces release-4-0-0alpha13
tagged by Jelmer Vernooij
on Fri Dec 24 02:05:59 2010 +0100
- Log -----------------------------------------------------------------
Tag 4.0.0alpha14.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQIcBAABAgAGBQJNE/H9AAoJEACAbyvXKaRXC88P/RL+0MViJrS0sSOwj3IXIoaf
yGK74r4sp9e9yI2uyL+/AM2XwrW0k5ieBpavWifqew3umNLVtC6Z9PwqkmPtw4KJ
hbQMcCDpmLDyxVr6k0QOYoXlAYsFM3i9OG+wj7oaEC714XRELxUaYYuVVJStLBA6
gTdTBJbwURtlGDyWXSLJi3tAAA14uyuqNtvtKueoSnN+gVAAtGVamX8pvUPYzNjh
QtpTrSY2yrgujIlevx0iaMc9o8e+clM6Fx6LSnaRS0xZavtR7H7D3vB+Ith0LjlF
HYsz6res7YgewUZv7CEyot+lNQsn6aK+36Vp2yOu6kRYqgg4Gr1gO7lLeiUDL7ds
5bDiiS1Vr2v3eXv0dvUcqQkDiue7anwbEwZTGGbMN8SFle6NLLxOYDPkUwm/AZCd
cMbjUN42Jyt0zAwM69W7sm1oMCwI9MRHe7ta/4iuGrngh2g+FiLcgKGnEj73xejs
4NZUQl9ZhpLl3TVr9eBoCJKtC6GjCiYAlaRAjpvP9YKvfEovHfCq7C0u0aAULCLT
pE0RLM8kxqJNT9sxxx5cBlGCKDGVbB50a8YoBqEJ+ukutm8PBLcDiMBE/xXJdrmy
tUUOpM/ke2ch2MP/I0T42E3ITlmQDGOm1DrZvNvj0TlTsHqk8xwh05PDZDmA7SdB
gpkpgCu4eaj8xWArP6LX
=/TgF
-----END PGP SIGNATURE-----
Abhidnya P Chirmule (3):
File BirthTime test
File winattr test
s3: Add a vfs_time_audit module
Anatoliy Atanasov (19):
s4/fsmo: Naming master support added
s4/drs: Added the rest of the enum drsuapi_DsNameFormat values
s4/drs: use type enum drsuapi_DsNameFormat in DsCrackNames code
s4/fsmo: Create separate function for retrieving fsmo role dn and owner dn.
s4/dcdiag: Handle ListRoles command for dcdiag:KnowsOfRoleHolders test
s4/dsdb:kcc: cleanup and improve readability
s4/eventlog6: Add idl for EventLog6 RPC
s4/eventlog6: Add endpoint server for EventLog6 RPC
s4/eventlog6: Build and hook EventLog6 RPC endpont mapper and idl
s4/eventlog6: Add dummy implementation for calls 0x5 and 0xB
s4/irpc: Add function to add security token to the binding handle
s4/irpc: Add security token to the binding handle when doing irp call forwarding
s4/test: Added test for simple bind with machine account
s4/auth: Add logon_parameters to authenticate_username_pw
s4/syntax: Add tests for DN+String and DN+Binary
s4/test: Add bind.py to make test
s4/test: Expand BindTest
s4/ldap: ldap_syntaxes.py cleanup
s4/operational: Fix swapped parameters for ldb_msg_copy_attr
Andreas Schneider (8):
s3-waf: Link smbd against RPCECHO.
s3-spoolss: Fixed print_access_check server_info.
s3-spoolss: Fixed print job access.
s3-winbind: Fixed the build of idmap_rid.
s3-rpc_server: Make auth_serversupplied_info const.
s3-rpc_server: Normalize rpc_pipe_open_interface pipe name.
s4-gensec: Add dependency on com_err to GENSEC_KRB5.
s3-winbind: Fixed init order.
Andrew Bartlett (216):
s4-winbind Add a proxy method to update DNS records with a read-write DC
libcli/ldap Add const to ldap_encode_ndr_dom_sid()
s3: Replace sid_binstring and sid_guidstring with PIDL-based alternatives
s3-uuid Remove unused smb_uuid_pack()
s3-libads call common GUID_from_ndr_blob()
s3-lib/util Remove unused smb_uuid_unpack()
s4-kerberos Fix kerberos_enctype_bitmap_to_enctypes()
s4-libnet Remove libnet_samdump_keytab() and net samdump keytab
s4-kerberos Move 'set key into keytab' code out of credentials.
s4-libnet_join Use header constant for 'all encryption types' in msDS-SupportedEncryptionTypes
s4-selftest Run slow tests less often
selftest Don't run 'speed' tests for very long
s4-kerberos Rework keytab handling to export servicePrincipalName entries
s4-kerberos Don't segfault if the password isn't specified in keytab generation
s4-dsdb Fix segfault in error case in rootdse module
s4-kdc Use msDS-SecondaryKrbTgtNumber to fill in the full KVNO
s4-kdc Add function to determine if a hdb entry is a RODC
s4-dsdb Make samdb_reference_dn() use dsdb_search() and DSDB_SEARCH_ONE_ONLY
s4-dsdb Add ldb_reset_err_string() when we set error codes.
s4-kdc Add common setup, handle RODC setup case
heimdal Add support for extracting a particular KVNO from the database
heimdal Add an error code for use in the RODC
s4-kdc Handle the case where we may be given a ticket from an RODC in db layer
heimdal Fix DNS name qualification to not mangle IP addresses
heimdal Use a seperate krb5_auth_context for the delegated credentials
s4-kdc Ensure that an RODC may act as a server (needed to fill
heimdal: added verbose logging of hemimdal crypto errors
heimdal use returned server entry from HDB to compare realms
s4-auth Allocate domain SIDs under the sids array, not server_info
s4-auth Add make_server_info_pac() to include 'resource domain' groups
s4-kdc Rework 'allowed encryption types' handling in the KDC
s4-kerberos Don't regenerate key values for each alias in keytab
s4-gensec Always honour the set server principal
s4-heimdal_build fix up build after heimdal import
s4-heimdal We don't need HDBDIR any more
s4:heimdal: import lorikeet-heimdal-201010022046 (commit 1bea031b9404b14114b0272ecbe56e60c567af5c)
Add new files for sha512 support
s4-kdc Fix up after import of new lorikeet-heimdal
s4-kdc Remove special case kerberos restriction in the KDC
s4-libnet_vampire use a linked list to handle schema objects pending conversion
s4-kerberos Remove unsued variable
s4-kerberos Remove unused parameter
s4-param Refactor secrets code to not require an event context.
s4-credentials Add explicit event context handling to Kerberos calls (only)
s4-smbd Remove event_context_set_default()
s4-tevent Remove event_contex_find() and event_context_set_default()
s4-ldb Don't use talloc_autofree_context() in ldb
s4-ldb Allow a NULL event context in samba_ldb_init()
ldb The use of a private event context isn't a hack
lib/torture: Add function to clean up the output directory
s4:smbtorture Create a new random output directory each time, and delete it
libcli/security Move most of security_token.c to common code.
lib/debug Add DEBUGC and DEBUGADDC as dummies
libcli/security Add debug class to security_token_debug() et al
s4-libcli/security Use seperate subsystem for session related functions
s4-credentials Allocate ldb result on correct memory context
libcli/security Use common security.h
libcli/security Provide a common, top level libcli/security/security.h
s3 Replace is_sid_in_token() with security_token_has_sid() from common code
s3-auth use security_token_has_sid() from the common code
s3-auth Use security_token_debug() from common code
s3-util_nttoken.c Also copy the rights_mask when copying a security_token
s3-acl Merge source4-supported privileges into se_access_check
s3-acl Use uint32_t for counting the ACEs
s4-acl Merge sec_access_check() with se_access_check() from source3/
libcli/security Move source3/lib/util_seaccess.c into the common code
libcli/security Define traditional constants in terms of IDL macros
libcli/auth Merge source4/libcli/security and util_sid.c into the common code
libcli/security Use static SIDs rather than parsing from strings
Revert "s4:dsdb - make the RELAX control private"
dsdb simple_ldap_map depends on LDBSAMBA
s4-provision Use --ldap-backend-nosync rather than just --nosync
s4-openldap-backend Don't set 'dbnosync' on cn=config
ldb Ensure we mark ongoing LDAP requests as PENDING
s4-selftest Make GDB_PROVISION work again
s4-ldb Add LDB_REQ_SET_LOCATION to help track handler use
s4-provision Remove serverdn parameter from Schema()
s4-provisionbackend Allow a fixed URI to be specified for LDAP backend
s4-gensec Don't upgrade all DIGEST-MD5 connections to seal
s4-gensec Don't give more to sasl_encode() than it will permit
s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.
s4-dsdb Allow LDB_ERR_INVALID_DN_SYNTAX in dsdb_load_partition_usn
s4-dsdb Add module to send only 'simple' DNs to OpenLDAP backends
s4-dsdb Reset the error string after 'expected' errors.
s3-waf Use LIBSECRUITY subsystem from the common wscript_build
libcli/ldap Don't try and encode a control with a NULL OID
s4-dsdb extended_dn_out: Move lazy dereference control creation to lazy-init
libcli/security Remove unused sec_acl_equal()
s3-smbd Remove manual override of DEBUGELVEL during exit
librpc Make ndrdump use printf() rather than having to mess with DEBUG()
auth/credentials Give a sensible behaviour for resetting the krb5 context
lib/util Remove setup_logging_stdout()
s4-torture Remove torture/locktest2.c (no longer compiled and unused)
lib/debug Use vdprintf rather than manually allocate
s3-debug Impove setup_logging() to specify logging to stderr
s3-debug Remove 'AllowDebugChange' and use lp_set_cmdline() instead
s3-debug Remove last direct assignements to DEBUGLEVEL
s3-debug Convert from x_file to real file descriptors.
s3-debug Move 'load_case_tables()' before lp_set_cmdline() and popt calls
s3-debug Clarify the handling of invalid state.fd values in debug.c
debug Explain the behaviour of setup_logging() more clearly
s3-libsmbclient-examples Add tests for debug behaviour.
s3-libsmbclient Add comments to describe the behaviour of DEBUG()
s3-libsmbclient Don't store 'debug_stderr' on the libsmbclient context
s3-param Fix up lp_set_cmdline() not to re-store cmdline options on each reload
heimdal Add handling for PAC signatures over all encryption types
s4-selftest Allow weak crypto so we can test DES-only behaviour.
s4-torture Add tests for DES-only accounts PAC behaviour/validation.
s4-process_model Fix valgrind-found use of un-initialised variable
s4-selftest Run RPC-PAC against all the DC environments.
s4-dsdb Fix urgent_replication test not to set an invalid userAccountControl
s4-ldap_server Don't DEBUG() at level 2 every time a caller disconnects
s4-kerberos Mention the remote address we fail to contact the KDC on
s4-selftest fix indentation
s4-dsdb Explain why we may not use the GC name in some situations.
s4-auth Supply more useful error messages on Kerberos failure
heimdal Add clock-skew handling to DCE-style GSSAPI
s4-dsdb Return an error if we can't convert UTF16MUNGED -> UTF8
s4-dsdb Convert new krbtgt_xxx password into UTF16
s4-dsdb Remove incorrectly declared ** variable used as *.
s4-provision UTF16 encode the password in sam.ldb, not secrets.ldb
heimdal Don't dereference NULL in error verify_checksum error path
heimdal Return HDB_ERR_NOT_FOUND_HERE to the caller
s4-kdc Return HDB_ERR_NOT_FOUND_HERE on un-revealed accounts on an RODC
s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f45533d07f2a2cbbd3224f29)
Add attribute macros for Heimdal to use
heimdal regenate lex and yacc files
heimdal Extra files required for merge up to current heimdal
s4-kdc Remove use of heimdal private headers in kpasswd server.
s4-kdc update startup routines after heimdal update
auth/gensec Handle incorrect username or password in Kerberos client code
s4-kdc Fix realm handling in our KDC
heimdal Fix handling of backwards cross-realm detection for Samba4
s4-gensec Indicate if GENSEC is in client or server mode in the debug
heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out
s4-kdc Don't always regenerate the PAC
s4-kdc Don't regenerate the PAC for cross-realm tickets
s4-kdc Add 'flags' parameter to db fetch calls
s4-kdc use 'flags' to only create the 'admin data' elements when requested
s4-kdc Fix the realm handling again, this time pay attention to the flags
heimdal Build ticket with the canonical server name
s4-test_kinit Add tests for lowercase realm combinations
s4-ldif_handlers Add handler for printing supplementalCredentials
samba-tool pwsettings Allow setting 'store cleartext'
samba-tool Add test for --store-plaintext
s4-kdc Rework supported encryption type logic to match Microsoft
wintest Force krb5.conf for BIND so we use the one generated for this test
wintest Set the virtual machine IP to match it's dynamic IP, but don't use DHCP
wintest Allow substitute to cope with objects like pexpect.EOF
wintest example configuration file for a KVM based wintest
wintest Explian that this is my KVM/libvirt configuration
wintest Improve wintest's handling of IP addresses and add more auto-setup
wintest Evolve wintest to handle it's own BIND nameserver
s4-setup correct the require BIND version for Dynamic DNS
wintest Don't connect to localhost or unqualified hostname, bind interface only
lib/debug Add clarifying comments
s3-netapi Add libnetapi_net_init(), don't double-init common Samba subsystems
s3-libnetapi Add function header comments
s3-libnetapi Load case tables earlier
s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics().
s4-dsdb Add 'block anonymous' checks to the rootdse module
s4-dsdb Remove rootDSE and anonymous checks from acl_read
s4-objectclass Use a specific local variable name, not 'value'
s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP)
s3-param Fix lp_set_cmdline() to set the flag on alias values too
s4-librpc Handle all types of GUID in the GUID() initialiser
s4-smb_server Return why the ntvfs_connect() failed.
wintest Add more VMs and correct titles
wintest Add automatic dcpromo is the host isn't a DC yet
wintest Fix case of BASEDN variables
wintest Add a function to shut down all the managed VMs at the start
wintest Set WIN_LCREALM and WIN_BASEDN automatically
wintest Make the new --vms option default to running all tests.
s4-samba-tool Show when we have created the user successfully
wintest Allow 'samba-tool newuser' to run a few times waiting for the RID Set
wintest Add more retries and fix up RODC handling after auto-dcpromo
wintest Another way to work out if a Windows machine is a DC
wintest Wipe the BIND data directory just before we restart bind
s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4617f8759b9df1a5e935c)
wintest Move stopping of BIND into a new step
s4-provision Add an invalid names check for 'domain == netbiosname'
s4-provision Always run slaptest to convert the config file
libcli/auth bring ADS_IGNORE_PRINCIPAL in common
s4-spnego use "not_defined_in_RFC4178 at please_ignore" if no principal specified
s4-param Allow +foo syntax in smb.conf list parsing
s4-client Use NTLMv2 by default in the Samba4 client.
s4-tests Workaround new default of 'client ntlmv2 auth = yes' in tests
s4-lsa Implement kerberos ticket life policy
s4-spnego Match Windows 2008, and no longer supply a name in the CIFS Negprot
wintest Remove the password expiry as the first step
s3-libads Default to NOT using the server-supplied principal from SPNEGO
s3-smbd Don't send SPNEGO principal (rfc4178 hint) by default
s3-client Use NTLMv2 by default in the Samba client
s3-docs Explain change to NTLMv2 by default in the client
s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'
s3-libsmb Don't ever ask for machine$ principals as a target.
s3-winbind Don't send the LM password to the server, ever
s3-winbind Improve memory handling in NTLMv2-backend plaintext authentication
wintest Share more of the S4 test code with the s3 test
s3-net Allow 'net ads dns register' to take an optional hostname argument
wintest More work to make test-s3.py work
s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like it
s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like it
wintest flush DNS on Windows clients to improve reliablity
s3-libsmb Improve error message when denying LM encryption
wintest Add testing of kerberos connections to Windows members of an AD domain
libcli/security Add sid_blob_parse() to directly parse a binary SID blob
s4-dsdb Use sid_blob_parse()
s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later
lib/ldb Remove talloc_free() that causes double-free in callbacks.
Revert "s4-dsdb Don't talloc_free() ares on failure, as LDB might free it later"
s4-auth Remove obsolete comment
s4-auth Remove event context from privilage database handling
s4-auth rework session_info handling not to require an auth context
s4-auth Remove duplicate copies of session_info creation code
s4-auth Ensure that we always copy across domain groups
Andrew Tridgell (595):
idl: build python interfaces for winbind and idmap IDL
s4-pyrpc: allow python to access irpc interfaces
s4-devel: developer script for adding DNS entries via netlogon RPC
s4-pydsdb: don't force am_rodc unless it is set by caller
s4-pydsdb: added am_rodc() method on samdb
s4-finddcs: added some debug messages on failure
s4-rodc: added RODC DNS update support to samba_dnsupdate
s4-cldap: improved debug msgs in finddcs_cldap()
s4-libnet: use the right domain name in libnet_lookup
s4-dns: added --all-names option to samba_dnsupdate
s4-dns: fixed the dns_domain_info_type for netlogon DNS calls
s4-rodc: override client site from cldap response
s4-rootdse: mark registered controls as non-critical
s4-kcc: a bit more debug info on repsFrom creation
s4-rodc: fixed repsFrom store on RODC
s4-pyrpc: fixed build on python 2.4
s4-drepl: use the partition UDV and hwm for extended getncchanges ops
s4-kcc: pass the service context into the kcc connection code
s4-kcc: added service->am_rodc
s4-gensec: fixed a GSSAPI SASL negotiation bug
s4-gensec: prevent a double free in the error path of GSSAPI auth
s4-drs: we don't need to decode to utf8 in python dcerpc strings any more
s4-gensec: fixed a client side bug in GENSEC/SASL/SSF negotiation
s4-kcc: the kcc should not be setting the repsTo attribute
lib-subunit: fixed build on systems without subunit devel library
torture: fixed a valgrind error in SMB2-CREATE
s4-repl: use dreplsrv_partition_source_dsa_by_guid to find source dsa
s4-repl: force on WRIT_REP when we are a writable replica
s4-repl: use namingContexts from rootDSE to initialise partition list
s4-pycredentials: avoid a tallloc_free on ref
s4-repl: don't store repsFrom on DNs other than NC heads
s4-finddcs: allow override of server IP address
s4-libnet: added server_address option in libnet context
s4-pynet: added server keyword to Net() initialisation
s4-net: added --ipaddress option to net commands
s4-repl: make getncchanges a bit less verbose
ldb: added request location tracking
s4-dsdb: added tagging of requests in dsdb modules
ldb: mark the location of a lot more ldb requests
script: added autobuild.py automatic build test script
autobuild: added --rebase option
autobuild: added a EDITOR script to mark successful autobuilds
autobuild: added --rebase-master and --push-master
autobuild: added --fix-whitespace option
autobuild: enable ccache
s4-provision: switch to dns-HOSTNAME instead of dns
s4-dns: the DNS/${HOSTNAME} SPN should be on the DNS account only
autobuild: added --retry option
s4-spn: don't try to do SPN updates as a RODC
s4-drs: use the system sam_ctx for updaterefs
idl-pac: add a decoder for the pac info ctr
s3-selftest: added samba3.posix_s3.rap.printing as a knownfail
autobuild: fixed detection of master changes
s4-auth: fixed the SID list for DCs in the PAC
autobuild: exit immediately if no changes from master
autobuild: use killbysubdir if available
s4-provision: fixed the generation of the krb5.conf for vampire
s4-dns: use the generated krb5.conf in samba_dnsupdate
s4-gensec: fixed a valgrind error in gensec
s4-drs: fixed comment in getncchanges code
s4-ildap: fixed a talloc_steal with references error
heimdal: avoid DNS search domain expansion
s4-dns: avoid search domains expansion in DNS resolver
s4-drs: make getncchanges debug less verbose
s4-kcc: don't print "Testing kcctpl_create_intersite_connections"
s4-ildap: two more places that need talloc_reparent()
s4-auth: removed unused variable dom_sid
s4-dsdb: added samdb_find_site_for_computer() and samdb_find_ntdsguid_for_computer()
s4-kcc: fixed a incorrect context to kcctpl_get_all_bridgehead_dcs
s4-ldb: removed an unused variable
s4-kdc: added ifdef guards in kdc.h
pidl: added ifdef guards around ndr headers
s4-dns: added --update-list option to samba_dnsupdate
s4-netlogon: added RODC DNS update call fwded to dnsupdate task
s4-dns: implemented RODC DNS update in dns update task
s4-provision: fixed the authority response for our SOA record
filter-subunit: added a --fail-immediately option
s4-selftest: added a --fail-immediately option to s4 test
waf: we don't need the preprocessor recursion limit any more
s4-drs: moved the drs_ObjectIdentifier handling to dsdb_dn.c
s4-drs: use drs_ObjectIdentifier_*() calls in getncchanges
ldb-tdb: ignore failure to register control on rootdse
s4-drs: added support for DRSUAPI_EXOP_REPL_OBJ
selftest: enable FAIL_IMMEDIATELY in autobuild make test
autobuild: use git notes for autobuild messages
ldb-dn: don't crash on NULL in ldb_binary_encode_string()
s4-sam: fixed termination of krbtgt_attrs (comma and NULL)
heimdal: fixed timegm UTC/GMT bug
s4-kdc: RODC DCs should be able to produce forwardable tickets
s4-provision: simplify our generated krb5.conf
s4-kerberos: use TZ=GMT when we are invoking krb5 code in helpers
s4-drsutils: expose DsBind() call in drs_utils.py
s4-spnupdate: when we are a RODC we need to use the WriteSPN DRS call
libds: added more UF_ -> ACB_ flags mappings
s4-sam: added DOMAIN_RID_ENTERPRISE_READONLY_DCS for RODCs in the PAC
util: added BINARY_ARRAY_SEARCH_V()
s4-drs: added drs_security_access_check_nc_root()
s4-drs: implement PAS checks and access checks for getncchanges
s4-devel: added new options to getncchanges script
s4-samldb: also set a password on the krbtgt_NNNN account
s4-dns: send A record updates via TKEY
idl-drsuapi: fixed another replica_flags that should use the bitmap
s4-kcc: fixed the replica_flags in repsFrom in the kcc
s4-drepl: fixed the checking of replica_flags in the drepl server
s4-drepl: don't call UpdateRefs on a RODC
s4-drs: added support for level 10 of getncchanges
autobuild: fixed exit status
autobuild: added much better email reporting
s4-dsdb: silence the domainFunctionality not setup warning
s4-libnet: wipe the old keytab when exporting
s4-drs: put the GCSPN flag into the repsTo if requested
s4-rodc: fixed the keyVersionNumber on the RODC account in secrets.keytab
s4-provision: wipe the old keytabs when provisioning
autobuild: push of ref/notes/commits isn't allowed in master
selftest: fixed a selftest error on sn
s4-spn: don't try and send an empty SPN list
s4-rodc: don't set SPECIAL_SECRET_PROCESSING on EXOP_REPL_SECRET
autobuild: fixed the --tail option for new log locations
s3-selftest: added samba3.posix_s3.rpc.spoolss.printer to knownfail
s4-dsdb: fail the transaction instead of asserting on error
s4-rpmd: fixed a use after realloc bug
autobuild: cwd is needed on all command types
autobuild: fixed the tuples in the retry_task
autobuild: disable the subuit changes for now - they break error checking
autobuild: revert a bit more of the subunit changes
s4-auth: fixed a vagrind error when creating keytabs
autobuild: fixed tuple count for retry
s4-kcc: remove stale repsTo entries in the KCC
s4-drs: fixed comparison login in replicated renames
s4-dsdb: added dsdb_search_by_dn_guid()
s4-rpc: added target_principal binding handle option
s4-repl: use the GC principal name for DRS replication connection
autobuild: include autobuild.log in logs.tar.gz
autobuild: show top commit in emails
script: added bisect-test.py git bisect script
bisect: more bisection options
s4-selftest: fixed up exit codes on signals for make test
s4-selftest: added --screen option for test
s4-server: exit with status 127 on SIGTERM
s4-ldif: get rid of the ndr_pull_error message on startup
s4-test: silence the Failed to chown message in make test
s4-test: silence a tap2subunit error
s4-selftest: silence warnings about bind chown
s4-selftest: support 'make testenv SCREEN=1'
s4-kcc: silence "Testing kcctpl_create_intersite_connections" message
autobuild: override the editor when marking the commit
waf: workaround for the 'make install' breakage
s4-test: changed the gentest test to use a fixed seed.
waf: fixed the problem with com_err on Ubuntu 9.04
s4-heimdal: disable using the system compile_et for now
waf: update to waf version 1.5.19
waf: fixed some python3.x portability issues
autobuild: only add autobuild.log if it exists
s3-spoolss: added another intermittent failure to knownfail
waf: allow for commands like "make bin/smbtorture"
s3-build: use the simpler "make bin/smbtorture" for s4 torture
maintainers: added initial MAINTAINERS.txt
maintainers: delete the old MAINTAINERS file
waf: fixed exit status of test suites
script: improvements to bisect-test.py
s4: mark us as not supporting python3 yet
autobuild: add an extra blank line before the autobuild markers
autobuild: send email failure if rebase fails
ldb: when running from build directory, use the build modules
s4-dynconfig: use the build modules when running from build directory
autobuild: do make install after make test
s4: don't rebuild all of heimdal when dynconfig options change
s4-torture: fixed uninitialised variable error
s4-torture: zero all of trans before the test starts
s4-ldb: added an optional operator_fn in the schema syntax
s4-ldb: implement an operator_fn for the ldb-samba syntaxes
s4-ldb: use operator_fn syntax function in ldb_match code
s4-schema: don't name variables after standard libc functions
s4-ldb: take advantage of ldb_match_msg_error() in more places
ldb: raise minor version number for new ldb_msg_match_error() function
s4: show samba version in bin/samba -b
security: ensure the merge of libcli/security doesn't change s3 behaviour
s4-heimdal: fixed some trailing commas in heimdal build
s4-waf: automatically remove stale C and header files
s4-net: fix the dependence on command line ordering
s4-finddcs: better debug messages to help track down DNS problems
script: the --tests option has been replaced by --test-command
s4-net: exit with a failure when a command is unknown
s4-test: fixed test_kinit.sh time command test
s4-test: fixed a typo in test_kinit.sh
replace: cope with systems that have fdatasync(), but don't have the prototype
readline: fixed the test for history_list()
waf: automap shared library names from .so to the right extension
waf: don't save deps on install
waf: put -Wl,-no-undefined only in the linker flags, not when compiling C
s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()
s4-ldb: added --relax cmdline option
s4-ldb: cope with NULL oid in controls
s4-dsdb: filter unregistered controls in the rootdse module
s4-ldap: mark all ldap:// requests as untrusted
s4-ldb: increase minor version for 2 new functions
selftest: terminate selftest if we can't setup the environment
s4-dsdb: register the DCPROMO_OID control with the rootdse
s4-mailslot: fixed handling of random collision in temporary mailslot names
autobuild: create an autobuild.pid file
waf: added --show-deps and --show-duplicates
waf: rework expand_subsystem_deps()
waf: allows libraries to be marked as private_library=True
waf: fixed expansion of direct_objects and direct_libs
libcli: make the LIBSECURITY subsystem into a private library
s4-dsdb: make SAMDB_COMMON into a private library
waf: re-work the module alias code
wrapper: make socket_wrapper, uid_wrapper and nss_wrapper private libs
libcli: make LIBCLI_NBT a private library
s4-ndr: make NDR_TABLE a private library
replace: make libreplace a private library
s4-auth: make auth a private library
s4-libcli: make LIBCLI_LDAP a private library
waf: cope with libraries with a specified version number
build: subunit and popt need to be marked as private libraries
s4-build: fixed some formatting
waf: added the concept of a grouping_library
waf: replace the is_bundled option with private_library
s4-waf: removed dependencies on missing subsystems
waf-build: create a samba_sockets grouping library
waf-build: create a NDR_SAMBA grouping library
s4-build: make LIBSAMBA-NET a private library
s4-waf: make NDR_STANDARD a grouping library and add NDR_SAMBA4
s4-dsdb: moved a bunch of fuctions from schema/schema_info_attr.c to samdb/ldb_modules/schema_util.c
s4-lib: make SMBPASSWD a private library
s4-libcli: make LIBSAMBA-ERRORS a private library
lib: add UTIL_TEVENT to samba_sockets grouping library
nsswitch: make LIBWBCLIENT a private library
nsswitch: make LIBWINBIND-CLIENT a private library
s4-dsdb: make ldb_password_hash depend on hdb not HEIMDAL_HDB_KEYS
s4-kdc: make DB_GLUE a private library
s4-events: make LIBEVENTS a private library
s4-socket: make LIBNETIF a private library
s4-libcli: make LIBSECURITY_SESSION a private library
waf: prevent the global deps list creating depenency loops
s4-waf: removed the XATTR and SASL aliases
s4-waf: don't depend directly on python modules
waf: raise an error on a dependency on a python module
s3-waf: mark some libraries as private
s4-param: added a libshares grouping library
s4-python: added a samba_python grouping library
librpc: added NDR_XATTR and NDR_UNIXINFO to the NDR_SAMBA grouping library
waf: added pyext option to SAMBA_LIBRARY()
lib: make WRAP_XATTR a private library
librpc: added RPC_NDR_SAMBA grouping library
s4-ldb: make pyldb_util a private library
librpc: added a few more NDR_* targets to NDR_SAMBA
s4-waf: removed the dependency loop between ntvfs and dcerpc_server
waf: show duplicate objects in python modules as well as libraries
s4-python: python_samba needs pyext
s4-rpc_server: split out DCERPC_SHARE as a separate subsystem
s4-events: LIBEVENTS depends on LIBSAMBA-UTIL
s4-dsdb: fixed depenencies for -no-undefined
libcli: LIBSECURITY depends on NDR_SECURITY
s4-librpc: fixed depenencies for libcli/security
waf: fixed the handling of -Wl,-no-undefined
waf-python: make the pyext flag add the pyembed features for libraries
waf: loosen the restriction on depending on python libs
s4-ldb: make ldb_options_find() public
s4-dsdb: force LDB_ERR_NO_SUCH_ATTRIBUTE on missing schemaInfo
waf: check the linker accepts a set of ldflags before using them
waf: RPC_NDR_WINBIND is samba4 specific
autobuild: don't cleanup the pid file within the retry loop
s4-waf: we don't need the smbtorture.static for s3 any more
s3-waf: fixed waf configure for recent changes
s3-waf: fixed paths in s3 waf build for rpc_server
waf: moved the -Wl,-no-undefined flags to source4 and ldb
waf: quote subsystem names to make them clearer
s3-waf: fixed the s3 waf build
waf: sped up the project rules checking
s4-ldb: create a private library ldb-cmdline
replace: create a private replace-test library
s4-heimdal: fixed the use of error_message() in heimdal
s4-heimdal: removed the use of signal.c from roken
s4-kdc: create a 'pac' private grouping library
waf: added suncc_wrap
waf: added env.DEVELOPER_MODE flag
waf: display the paths in library loops
waf: separate out get_tgt_list()
waf: cope with rules with no inputs
waf: use Utils.WafError() instead of raising an AssertionError
waf: build all libraries after all object files
waf: added --symbol-check option
waf: don't auto-depend on subsystems
waf: cope with subsystems with no static modules
waf: give a better error on a bad grouping library
waf: save the samba_deps_extended
s4-smbd: don't initialise process models more than once
s4-smbd: make our process models into real modules
s4-torture: simplify the depenencies for TORTURE_DRS
s4-modules: remove LD_SAMBA_MODULE_PATH
s4-rpc: split the dcesrv reply code out of dcerpc_server
zlib: use the real library name 'z' instead of ZLIB
s4-ldbwrap: split ldb-wrap out from the LDBSAMBA subsystem
s4-ldb: add explicit depenencies on ldb library in ldb modules
s4-credentials: make a private library from CREDENTIALS subsystem
s4-auth: make KERBEROS subsystem into authkrb5 private library
s4-tdb: make tdb-wrap into a private library
s4-replace: make libreplace a private shared lib in s4
s4-cluster: make cluster a private shared lib
s4-dns: make the dns update task an external module
s4-cmdline: make cmdline-credentials a private library
s4-ndr: make ndr-table a subsystem
s4-build: removed some unnecessary dependencies
waf: get rid of target aliases in wafsamba
s4-test: don't override modules dir
s4-waf: added a lexyacc.sh script that manually rebuilds the heimdal parsers
s4-heimdal: lex_err_message() should not be static
waf: fixed building of non-shared binaries that contain modules
s4-smbd: leave the single process model as internal
s4-smbd: initialise process models in smbtorture before use
s4-auth: added a dependency on com_err
s4-server: avoid using environ as it is not portable
waf: added module_init_name parameter to SAMBA_MODULE()
s4-ldb: support a new type of ldb module loading
s4-ldb: convert the ildap module to the new type of ldb module
s4-ldb: convert the openldap ldb backend to the new style of module
s4-dsdb: convert the extended_dn_out module to the new ldb module style
s4-dsdb: convert the simple_ldap_map module to the new module style
waf: added automatic prototyping of static module init functions
s4-process_model: use the static module prototyping
s4-ldb: convert the rest of the ldb modules to the new style
s4-ldb: removed the old ldb module loading style
s4-test: we don't need to set LDB_MODULES_PATH any more
s4-dsdb: convert the rest of the ldb modules to the new module type
waf: removed the module aliases code
s4-modules: get rid of the remaining static prototypes for modules
s4-ldb: it is not an error for the modules directory to not exist
s4-ldb: added an override flag to ldb_register_backend()
s4-ldb: added support for general ldb hooks in modules
s4-ldb: moved the ldb_ildap backend into lib/ldb-samba
s4-ldb: added samba_extensions ldb module
s4-ldb: added ldb command line hook support
s4-ldb: convert existing ldb tools to use new command line hooks
s4-ldb: fixed build of oLschema2ldif
s4-ldb: fixed build of paged searches
s4-ldb: added support for ldb module version checking
s4-ldb: enable ldb module version checking
s4-ldb: enable version checking in dsdb ldb modules
s4-ldb: use ldb_set_modules_dir() to load additional ldb modules
s4-ldb: removed ldb_includes.h
s4-ldb: expose some more ldb module functions
s4-dsdb: removed the use of ldb_private.h from s4
s4-ldb: give the user a hint as to what may be wrong
waf: fixed wildcard build
waf: rerun deps calculation on LDFLAGS or CFLAGS change
waf: fixed wildcard build for full paths
s4-build: use -Wl,--as-needed if supported
waf: split pkgconfig logic into a separate module
waf: ensure pkgconfig files depend on the prefix
waf: added reconfigure targets to our libraries
s4-ldb: make ldbtest depend on ldb
waf: more agressively expand subsystem syslib deps
s4-test: if using a system version of ldb, override the ldb modules path
s4-ldb: fixed sorting of module names
s4-server: cleanup allocation of process models
build: a more portable way of finding waf in makefiles
debug: fixed default debug settings
s4-auth: unconditionally set previous_ev
s4-test: fixed quoting in deletetest.py
Move the checking of single valued attributes back into the tdb backend.
s4-ldb: honor controls on search in ldbedit
s4-ldb: don't load modules from the same directory twice
s4-ldb: implement LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK
s4-dsdb: use LDB_FLAG_INTERNAL_DISABLE_SINGLE_VALUE_CHECK in dsdb
s4-dsdb: use LDB_FLAG_MOD_REPLACE for isDeleted
compression: fixed an uninitialised data but in lzxpress
compression: added a simple lzxpress test
s4: don't run etags over .inst files
pidl: use a union assignment instead of memmove
s4-pydsdb: added DsReplicaAttribute()
s4-pydrs: added rodc option to python drs replication
s4-join: added DC join to the python join code
s4: net -> samba-tool
s4-ldb: show the reason for module initialization failure
s4-drs: reduce the memory usage of the getncchanges server
s4-ldb: much more memory efficient msg filtering
s4-cldap: print all the DNS servers found
s4-join: don't print all the NDR packets by default
s4-join: fixed secure_channel_type
samba-tool: deprecate samba-tool vampire command
s4-join: switch over to the new DC join in make test
s4-join: fixed SPNs, invocationId and dnshostname and python join
s4-cldap: fixed debug message to match content
s4-dsdb: give the DN on a shema attribute failure
s4-drs: allow override of the replica_flags
s4-join: modify join behaviour according to domain level
s4-pydrs: validate the DsGetNCChanges response
s4-ldb: better error message when we try to register a module twice
waf: prevent us from modifying non-install libs during make install
waf: fixed tabs/spaces for python3.0
s4-dns: ensure we get the right case on the grant rule for administrator
waf: fixed the names of the installed libraries after the last change
waf: go back to the previous method of handling .inst. rules
s4-ldb: don't give an error if a module is already registered
s4-debug: lowered the debug level of some unimportant messages
fix
s4-repl: fixed replication notifications to RODCs
s4-drs: allow bypass of writespn checking for some SPNs
heimdal: fixed a shadowed variable warning for error_message
s4-drs: reduce verbosity of dreplsrv_out_connection_attach
s4-test: make sure the selftest prefix exists
s4-join: raise mininum password length to 32 in new join code
s4: point to the wiki howto for s4
s4-server: move the creation of the IPC$ share into ntvfs
s4-loadparm: fixed dumping of non-default parms with testparm
s4-join: use the command line loadparm in provision during a join
s4-test: use IPC$ instead of ADMIN$ for srvsvc NetShareGetInfo test
s4-devel: useful script for testing join with empty smb.conf
s4-provision: include command line provision options in the generated smb.conf
s4-loadparm: fix the FLAG_DEFAULT settings on specially handled parameters
s4-kdc: rename kdc/kdc.h to kdc/kdc-glue.h
s4-kdc: we don't need the special include handling now
s4-kdc: split the kdc process return into a tri-state
s4-kdc: added proxying of kdc requests for RODCs
s4-test: we need to import testtools before subunit/python
s4-drs: fixed a crash in writspn
s4-auth: fixed crash in krb5 auth
s4-auth: fixed infinite loop in krb5 auth
samba-tool: fixed crash in "samba-tool drs showrepl"
s4-server: make server sockets a child of the task context
s4-kdc: if "bind interfaces only" is false, then also listen on wildcard
s4-dns: fixed registration of multiple IPs in samba_dnsupdate
s4-dns: added --fail-immediately option to samba_dnsupdate
waf: fixed configure again on RHEL5
s4-devel: a script to test the Samba4 HOWTO
s4-join: not all versions of w2003 have msDS-SupportedEncryptionTypes
waf: added --git-local-changes configure option
s4-eventlog: fixed dcerpc handle return
s4-spoolss: fixed warning in call to torture_warning()
s4-test: fixes for test-howto.py
s4-loadparm: fixed a memory leak in handle_realm()
s4-loadparm: set debuglevel and logfile in tables
s4-join: enable NDR printing at debug levels >= 5
s4-join: show a reasonable error on DsAddEntry() failing
s4-join: fixed join to w2k3
s4-test: added testing of w2k3 DC join to test-howto.py
s4-dns: catch more expections in samba_dnsupdate
s4-provision: add log messages about IP lookup
s4-provision: use the command line lp in provision
s4-gensec: zero the gssapi_state
s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY
s4-test: updates to test-howto.py
heimdal: added HEIM_BASE_NON_ATOMIC option
s4-heimdal: ask for non-atomic heimdal
s4-provision: don't try to autodetect xattr is posix:eadb is set
developer: only do the C++ reserved name checking on Linux
s4-provision: setup posix:eadb using lp.set()
s4-provision: don't test for xattrs if posix:eadb is set
s4-doserr: telling our users to "see Windows help" doesn't seem right
s4-kcc: fixed result_last_attempt in showrepl
s4-repl: ensure we don't starve pending replication ops
s4-repl: save the result of the last replication in repsFrom/repsTo
s4-repl: removed the syncall_workaround code
s4-wintest: added wintest.py library
s4-test: rename scripting/devel/howto to scripting/devel/wintest
s4-test: added greater control over tests to run
s4-dns: added support for --fail-immediately for RODC netlogon dns updates
s4-spnupdate: only enable NDR print at log level above 5
s4-test: use --fail-immediately for samba_dnsupdate testing
s4-test: added --rebase and --clean options
s4-wintest: remove files in var/ when reprovisioning
s4-drs: fixed a typo
s4-join: initially disable the machine account
s4-rodc: enable the DRS_GET_ALL_GROUP_MEMBERSHIP flag for RODC replication
s4-wintest: reliability and usability improvements
talloc: added TALLOC_FREE_FILL environment variable
wintest: moved to top level
wintest: rename test-howto.py to test-s4-howto.py
wintest: move conf files to conf/
wintest: added del_files, write_file and casefold
wintest: the start of a S3 testing script for wintest
s4-rpc: make rpc connect less verbose
waf: fixed the build with a space in the source directory
pidl: fixed call to cpp with a space in the directory name
heimdal: fixed the waf build with a space in the directory name
s4-ldb: fixed the build with a space in the ldb modules directory name
s4-ldb: added an environment varibale LDB_WARN_UNINDEXED
wintest: tidyups and new conf variables
s4-kcc: disable the NDR printing of DRS getinfo requests
s4-dynconfig: override more paths when running from the build directory
s3-torture: remove the merged_build tests for building smbtorture4
s4-devel: we don't need to override these scripts now
wintest: fixed interface handling and DNS forwarding
wintest: remove reliance on hostname in /etc/hosts
wintest: fixed cleanup of /etc/resolv.conf
wintest: added an IPv6 address, and use fully qualified hostname
s3-test: try to avoid a problem of CFLAGS propogating to the torture build
s4-provision: don't try to look for an IPv6 address when not specified
wintest: make IPv6 optional in wintest
wintest: fixed "rndc command" option in provision
wintest: do an initial replication of CN=Configuration to transfer dnsHostname
s4-provision: fixed eadb automatic and manual setting in provision
s4-kcc: fixed valgrind errors in drs replicaInfo server side
wintest: handle missing firewall commands
wintest: avoid adding a blank line to resolv.conf on each run
wintest: cope with VMs sometimes not rebooting
s4-libnet: use the full DNS domain for CLDAP lookups if possible
s4-samba-tool: fixed "-k no" for disabling kerberos auth
libds: added mS-DS-ReplicatesNCReason flags
s4-pydsdb: use cpp macro to simplify flags definitions
s4-drs: allow DrsReplicaGetInfo as a DC
s4-pyglue: expose the remaining NTTIME functions from glue
s4-samba-tool: added python implementation of samba-tool drs commands
s4-samba-tool: switched over to python version of samba-tool drs
s4-samba-tool: removed old C implementation of samba-tool drs
s4-drs: fixed credit for C version
s4-samba-tool: support help, and show description of commands
s4-pydsdb: added GPO policy flags
s4-samba-tool: started on gpo subcommands in python
s4-pydsdb: two more GPO related flags
s4-dsdb: give full error message for operational failures
s4-gpo: started on samba-tool gpo list command
s4-loadparm: added loadparm_init_global()
s4-loadparm: use loadparm_init_global() instead of loadparm_init()
s4-pyglue: added get_debug_level() method
s4-ldapcmp: fixed exception handling
s4-ldapcmp: make ldapcmp a samba-tool command
s4-join: fixed exception handling in join command
s4-samba-tool: improved exception handling in samba-tool
s4-samba-tool: fixed ldb exception handling in domainlevel command
s4-samba-tool: fixed exception handling in subcommands
s4-repl_schema: fixed ldb exception handling
s4-samdb: give a better exception if multiple users match in password change
wintest: cope with the heimdal version of kinit
s4-dns: catch all DNS exceptions in samba_dnsupdate
heimdal: fix for w2000 from lha
wintest: added --vms option
wintest: make expect calls case insensitive by default
s4-provision: fixed check for missing msDS-SupportedEncryptionTypes
s4-build: added a 'make help' target
waf: added a help target for the other waf builds
waf: use Logs.warn() instead of print() in the symbol check code
waf: less verbose message for failing to resolve a syslib path
wintest: fixed casefold handling in expect calls
s4-provision: remove the disabled bit in the dns-$HOSTNAME account
wintest: wait for the windows DC to register its DNS name
s4-drs: the options attribute is optional on NTDSDSA objects
wintest: cope with delays in w2k3 starting its DRS server
wintest: fixed formatting of wintest in emacs python mode
wintest: we don't need the WIN_BASEDN vars any more
wintest: make command matching case insensitive by default
wintest: cope with w2k3 form of dcdiag output
s4-drs: cope with invalid NTDS DNs from DsReplicaInfo()
s4-ldap: removed an incorrect talloc_move()
wintest: added README
wintest: put most of the main program login in wintest.py
wintest: autodetect if named supports tkey-gssapi-keytab
s4-dns: a dlz module for bind9
s4-dns: added flags support for dlz_bind9
s4-dns: support Samba command line options to the dlz_bind.so module
s4-dns: return the correct TTL
samba-tools: export doesn't need any credentials
samba-tools: more reasonable defaults for samba-tool commands
wintest: use --add-ref for RODC replication
s4-ldb: ensure ldb_register_samba_handlers() is not done twice
s4-dsdb: register samba handlers in dsdb module
s4-dns: allow a remote ldap server to be used with dlz_bind9
s4-ldb: use RTLD_DEEPBIND if available for ldb modules
s4-dns: use ldb hooks for samba extensions in dlz_bind9
s4-waf: get the version number right on private libraries
s4-dns: dlz_bind9 doesn't need to link to gensec any more
waf: added configure test for -Wl,--version-script
waf: use -Wl,--version-script if available
s4-heimdal: enable symbol versioning in heimdal
s3-waf: fixed version number handling
waf: make all generators depend on their rules
waf: added -Wmissing-prototypes to build
waf: support @LIB_RPATH@ in pc files
s4-ldb: added @LIB_RPATH@ to the ldb pc file
waf: added --disable-symbol-versions configure option
s4-pkgconfig: add @LIB_RPATH@ to our link flags
waf-abi: auto-generate per-symbol versions from ABI files
waf: make mkdir_p on a empty string not recurse forever
waf: use vscripts for our private libraries too
waf: don't use symbol versioning on our modules
waf: add a dependency between the library and its vscript
waf: fixed path to abi_directory
waf: remove the restriction that private libraries must not have a vnum
s3-vfstest: fixed paths in vfstest
waf: the libXX.inst.so file also depends on the vscript
waf: fixed re-running of build rules
s4-dns: added basic DLZ writeable support to dlz_bind9
s4-dns: implemented parsing and storing of DNS records from bind
dnsp: fixed parsing of dns_name structures
s4-dns: fixed a crash bug in dlz_bind9 code
dns: auto-calculate the wDataLength field in DNS records
dns: fixed the padding for dnsp_name fields in LDAP
s4-dns: disable segfault handling in dlz_bind9
s4-provision: removed an incorrect debug message
s4-dns: return the local hostname as the SOA authority
dns: cope with trailing '.' in dns_name
s4-dns: fixed name comparison in bind9 module
s4-dns: set dwSerial and dwFlags
dns: fixed dns record format
André Hentschel (1):
net: Add and fix some German translation
Arnaud Faucher (2):
heimdal: Don't depend on compile_asn1 and et_compile when using system versions.
Avoid the use of PyAPI_DATA, which is for internal Python API's.
Bjoern Baumbach (1):
Make sure that user exists after running add user script before adding sam account.
Björn JACKE (1):
autobuild: perfer to use git mail address in autobuild comment
Björn Jacke (39):
s3/vfs_scannedonly: use smb_msleep instead of nanosleep
s3: use nsec_time_diff instead of TspecDiff
s3: remove TspecDiff macro, we can use the shared nsec_time_diff function
s3/s4: merge msleep and smb_msleep
s3: remove TvalDiff macro, we can use the shared usec_time_diff function
Ñ•3: remove smb_msleep prototype from here
s3: fix order of arguments in nsec_time_diff call
lib/util: usec_time_diff takes arguments the other way round than TvalDiff did
s3/winbind: remove unused winbindd_check_cache_size
s3: don't build krb5 locator plugin if we don't build winbind
tevent: include libreplace heade before tevent header
libreplace: fix endless strerror_r has been redefined warnings on AIX
s3: fix tdbdump build on Solaris and other boxes
s3/configure: fix typo and warning
s3/vfs_time_audit: use monotonic clock for time deltas
s3/time_audit: fix a change that was just for debuggin purposeѕ
s3/doc: add missing documentation for vfs_time_audit
s3/vfs_tsmsm: fix debug output for large files
s3/vfs_tsmsm: remove unneeded cast to off_t
Ñ•3/configue: set Tru64 cc's PIC switch right (none)
s3/smbtorture: use $MAKE to build to make sure we use the make that makes our build
librpc: fix builds without IPv6 suport (HP-UX 11.00)
s3/configure: fix GNU ld version detection with old gcc releases
s4/waf: add intl dependency for nss_winnbind
waf/buildtools: use /bin/sh instead of /bin/bash and put ^ in quotes
waf/buildtools: remove more bash shebangs and fix a == to =
smbprinting: fix wrong == in shell tests
fix Ñ•ome == to correct shell test in commented stuff
tests: avoid bash in shebang and fix wrong "==" in test
s3/selftest: add some FIXMEs
s4/ldb: fix shell syntax error in test script
s4/scripting/ktpass: make shell code portable and eliminate another bash requirement
s3/net: don't use external "date" to make "net time set" more portable
s3/net: tz argument should be NULL of course
s3: add FILE_ATTRIBUTE_SPARSE to get_stat_dos_flags
s3: remove set_sparse_flag
s3/vfs_gpfs: map SPARSE attribute to/from WINATTRs, too
s3:smbd: add file_set_sparse() function
s3:smbd: implement FSCTL_SET_SPARSE more correctly
Brad Hards (2):
s4-auth Fix typos in samba4 auth code
Update dcerpc_server.pc library name to match reality.
Christian Ambach (8):
s3:vfs:syncops make it possible to specify syncops:onclose per share
s3:vfs:syncops add option to disable module per share
s3:vfs:gpfs convert sharemodes/leases parameter
s3:gpfs: Add support for the gpfs_ftruncate call
s3:winbind add timeouts to winbind cache
s3:winbind add wcache_tdc_fetch_domainbysid
s3:idmap: add a new ID mapping module autorid
s3:winbind correct a copy&paste error
David Disseldorp (2):
s3-spoolss: fix spoolss GetPrinterData behaviour
s3-printing: fix printer_list_traverse()
Gregor Beck (11):
s3-docs: document net registry
s3-lib: add cbuf, a talloced character buffer
s3-lib: add srprs, primitives to build simple recursive parsers
s3-registry: handle registration entries (.reg) files
s3-net: let rpccli_winreg_Connect optionally return WERROR
s3-net: add command registry import
s3-net: add command registry export
s3-net: add command registry convert
s3-net: add command rpc registry export
s3-net: add command rpc registry import
s3:registry: proposed aix build fix for reg_parse_internal
Günther Deschner (312):
s4-smbtorture: fix winreg querymultiplevalues NDR test warning.
testprogs: skip two tests in spoolss tester.
libnetapi: deal with NULL data in I_NetLogonControl2().
s3-libnetapi: support NETLOGON_CONTROL_FORCE_DNS_REG in I_NetLogonControl().
s3-nltest: add dsregdns command to nltest.
s3-rpcclient: add some winreg commands.
s4-smbtorture: add LOCAL-NDR-NTLMSSP.
s3-waf: add rpcclient to the waf build.
s3-registry: add reg_querymultiplevalues to reg_api matching table.
s3-registry: move regf based reg_api calls into own file.
s3-waf: fix the build after reg_api changes.
s3-waf: fix the file locations of gen_ndr'ed files.
s4-smbtorture: add test_SetServiceObjectSecurity() to RPC-SVCCTL.
s3-waf: add libnetapi
s3-waf: add net.
s3-waf: fix the build after registry changes.
s4-smbtorture: add NetRemoteTOD libnetapi torture test.
s3-build: only include async headers where needed.
s3-build: only include ctdbd_conn.h where needed.
s3-build: only include smbldap.h where needed.
libcli: add dom_sid_compare_domain()
s3-util_sid: use shared dom_sid_compare_auth and dom_sid_equal_X functions.
s3-util: use shared dom_sid_dup.
s3-nmbd: move SYNC_DNS to nmbd.h
s3-build: try to fix the non-ldap build.
lib/tdb: fix c++ build warning in tdb_header_hash().
s4-smbtorture: print SVCCTL security descriptor in test_QueryServiceObjectSecurity().
s3-libnetapi: Fix Bug #7665, memory leak in netapi connection manager.
s3-winbindd: another attempt to fix the non-ldap build.
s3-waf: remove reg_util_legacy from waf build as well.
s3-libgpo: fix the build of scripts client side extension.
s3-lsa: Fix sid in DEBUG in_lsa_EnumAccountRights.
s4-smbtorture: print out membership in RPC-SPOOLSS-ACCESS.
s3-waf: fix the build.
s3-registry: fix some c++ build warnings.
s3-waf: add libsmbclient.
s3-waf: reconcile objects to old make-based build.
s3-build: strip down dependencies of smbta-util.
s3-build: fix the build of test_lp_load.
s3-build: fix the build of split_tokens.
s3-waf: add all remaining binaries from the make build.
s3-waf: add libsmbsharemodes.so.
s3-waf: rework libnetapi to have no unresolved symbols.
waf: move majority of shared NDR_ subsystems to main wscript_build.
s3-waf: fix LOCALEDIR usage.
waf: fix generated nbt.h path, should fix s4 install.
s3-waf: recurse into main wscript_build from main librpc directory.
s3-waf: move epmapper client to LIBMSRPC.
s3-build: move epmapper client to LIBMSRPC.
s3-waf: convert LIBMSRPC_GEN into a subsystem.
s4-waf: move two more NDR_ subsystems to main directory.
s3-waf: recurse into ../lib/crypto.
s3-waf: add libaddns.so.
s3-waf: convert smbd into a subsystem.
s3-waf: convert LIBADS into a subsystem.
s3-waf: convert LIBADS_SERVER into a subsystem.
s3-waf: convert LIBADS_PRINTER into a subsystem.
s4-waf: add NDR_LSARPC and NDR_SAMR.
s3-waf: first run in using NDR_ subsystems (mostly from shared directory).
s3-dsgetdcname: always pass in messaging context.
s3-waf: fix the build after rpc_server crypto changes.
s3-waf: convert LIBMSRPC into a subsystem.
s4-waf: move the RPC_NDR subsystems to main librpc wscript_build.
s3-waf: fix the build of nsstest with --enable-nss-wrapper.
s3-waf: remove duplicate CONFIGFILE from dynconfig.py which caused sysconfigdir
s3-waf: add more diroptions.
s3-waf: fix the build.
s3-waf: add check for seteuid method.
s3-waf: add wscript_build to s3 librpc dir for NDR_ subsystems.
s3-waf: add autogen-waf.sh to source3.
s3-waf: add RPC_NDR_WBINT to librpc/wscript_build.
s3-waf: convert LOCKING into a subsystem.
s3-waf: let winbind depend on SRV_NDR_WBINT and RPCCLI_NDR_WBINT.
s3-waf: convert AFS_SETTOKEN and AFS into subsystems.
s3-waf: convert PROFILE into a subsystem.
s3-waf: convert READLINE into a subsystem.
s3-waf: convert PASSWD_UTIL into a subsystem.
s3-waf: convert LIBNET et al into subsystems.
s4-waf: rename subsystem NDR_LSAPRC to NDR_LSA.
s4-waf: add NDR_EVENTLOG.
s3-waf: convert LIBEVENTLOG into a subsystem.
s3-waf: install header files for our libraries.
s3-waf: fix libnetapi and libaddns unresolved symbols.
s3-waf: convert DISPLAY_SEC into a subsystem.
s3-waf: add missing idmap module objectfiles.
s3-waf: fix debug2html.
s3-vfs: fix the build of nfs4_acls.c
s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems.
s3-waf: convert LIBGPO into a subsystem.
s3-waf: convert AUTH into subsystem.
s3-waf: convert PDB into subsystem.
s3-waf: convert IDMAP into subsystem.
s3-waf: convert CHARSET into a subsystem.
s3-waf: convert PERFCOUNT into a subsystem.
s3-waf: convert GPEXT into a subsystem.
s3-waf: convert VFS into a subsystem.
s3-waf: add some module specific functions for s3 waf build.
s3-waf: move VFS subsystem to modules/wscript_build.
s3-waf: support --with-acl-support, at least for posix acls.
s3-waf: move auth subsystem to auth/wscript_build.
s3-waf: move pdb subsystem to pdb/wscript_build.
s3-waf: move idmap subsystem to winbindd/wscript_build.
s3-waf: move charset subsystem to modules/wscript_build.
s3-waf: move perfcount subsystem to modules/wscript_build.
s3-waf: move gpext subsystem to libgpo/gpext/wscript_build.
s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.
s3-waf: add missing IDMAP modules.
waf: add delimiter argument to TO_LIST.
s3-waf: rework static and shared list handling a little.
s3-waf: add two more REGF based subsystems.
s3-waf: add PRINTING subsystems.
s3-waf: move SERVICES into a subsystem.
s4-smbtorture: remove unneeded dcerpc_mgmt alias.
s4-waf: remove NDR-SRVSVC alias.
waf: add more NDR subsystems for shared IDL files.
s3-waf: NDR_SRVSVC is defined now from the main librpc wscript_build.
s3-waf: link PReg parser only in registry client side extension.
s3-waf: fix dependencies to NDR_XATTR.
s3-waf: add NDR_PERFCOUNT subsystem.
s4-smbtorture: rework test_EnumPrintProcessors to let it test more combinations.
s3-spoolss: Fix _spoolss_EnumPrintProcessors error handling
s4-smbtorture: rework spoolss_EnumPrintProcDataTypes test.
s3-spoolss: Fix _spoolss_EnumPrintProcDataTypes error handling
samr: add three new ACB flags to IDL.
s3-printing: remove unused old structs.
s3-auth_util: make sure the system server info actually contains S-1-5-18.
s3-waf: add pam_smbpass.
s3-waf: fix dependencies in most of our module subsystems.
s3-waf: add vfs_linux_xfs_sgid to the list of default shared modules.
s3-waf: add AUTH_SCRIPT module to AUTH subsystem (which is build as shared
s3-waf: add in a little hack to deal with the ECHO rpc module for non-developer builds.
s3-printing: skip metadata entry when traversing printerlist.
s3-waf: add vlp binary.
s3-waf: clean up socket-wrapper and nss-wrapper a little.
s3-waf: add basic make test infrastructure, not able to test yet.
s4-smbtorture: add new EnumPrinters test to test printername/servername
s3-spoolss: Fix servername/printername handling which turns out to be very important to get right.
spoolss: use the correct flags for spoolss_PrinterInfo1 struct.
s3-spoolss: make sure to exit early and with the appropriate error code in
s3-spoolss: dont overwrite location change notify.
s3-spoolss: make sure we dont crash on NULL setprinter level2 elements as seen from win7.
s3-net: make sure we dont crash when publishing a single printer.
s3-net: better handle obscure 0x80070002 error reply when trying to update an
s3-spoolss: fix do_drv_upgrade_printer() which must have been broken since the
samba: share select wrappers.
s3-readline: move cmd_history to smbclient, the only user.
samba: share readline wrappers among all buildsystems.
s3-dcerpc: no point for printing NDR twice for internal pipes in log level 10.
testprogs: print architecture used in win32 spoolss testsuite.
s3-spoolss: Strip off ", DrvConvert" and ",LocalOnly" in OpenPrinterEx as seen from Win7 clients.
spoolss: fill in spoolss_AddPortEx IDL.
spoolss: fill in spoolss_SetPort IDL.
spoolss: fill in spoolss_DeletePort IDL.
s3-waf: add RPCCLI_WINREG subsystem.
s3-waf: convert NSS_INFO into a subsystem.
s3-libndr: handle NDR_ERR_IPV6ADDRESS case in ndr_errstr().
s3-reg_parse: fix uninitialized variable in srprs_key().
libndr: fix "excess elements in struct initializer" warning.
s4-selftest: move spoolss to skip list.
s3-selftest: enable smb2 torture tests against samba3.
s3-waf: use more of the NDR_ subsystems.
s3-waf: add slightly different mkbuildoptions awk script for waf.
Revert "libndr: fix "excess elements in struct initializer" warning."
selftest: make it more obvious we only expect the printjob tests to fail.
s3-samr: fix _samr_QueryGroupMember().
s4-samr: Fix dcesrv_samr_QueryGroupMember.
samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray.
s3-docs: fix typo in "add port command" smb.conf manpage.
s4-smbtorture: re-arrange openprinterex tests.
s3-rpcclient: add openprinter_ex command.
s3-spoolss: make it possible to have and announce a [prnproc$] share on the printserver.
s3-waf: slowly getting modules to match how they look like in old build.
s4-smbtorture: add test for openprinter printername pattern.
s3-spoolss: fix set_printer_hnd_name() to match torture test.
s3-spoolss: convert open_printer_hnd to return WERROR.
s3-spoolss: let set_printer_hnd_name return WERROR.
s3-spoolss: add more userlevel info validation to _spoolss_OpenPrinterEx.
pidl: fix minor typo in s3 server generation.
s3-waf: fix pdb modules build.
s3-waf: fix the build of smbtorture.
s3-waf: fix the build after libcli/security changes.
s3: fix the build of idmap_adex, idmap_tdb2, idmap_hash and several vfs modules.
s3-waf: convert rpc into a subsystem.
s3-waf: all subsystems complete now, no need for this loop anymore.
s3-waf: move RPC_CLIENT_SCHANNEL into a subsystem.
s3-waf: convert LIBSMBCONF into a subsystem.
s3-waf: more registry cleanup.
nsstest: no need for two copies of the same tool.
s3-selftest: add vfs_modulesdir variable for both test systems.
s3-waf: use LZXPRESS subsystem.
s3-waf: add vfs_time_audit to the build.
s3-waf: add check for httpConnect and httpConnectEncrypt.
s3-waf: add idmap_autorid to the build.
s4-smbtorture: allow to test returned type after specific error code in PrinterData tests.
s4-smbtorture: use test_GetPrinterData{Ex}_checktype calls in RPC-SPOOLSS tests.
s3-rpcclient: exit early in cmd_spoolss_enum_data() when there is a failure.
s3-spoolss: add debug statement for access denied cases in OpenPrinterEx path.
s3-spoolss: make sure members of "BUILTIN\Print Operators" can open printers
s3-spoolss: fix typo in debug message.
s3-waf: move build rules into libaddns directory.
libaddns: add dns_errstr().
s3-net: use dns_errstr() when dns commands fail.
s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS.
s4-smbtorture: re-arrange RPC-SPOOLSS-DRIVER test a bit.
s4-smbtorture: handle driverfile overlap during removal in RPC-SPOOLSS-DRIVER.
s4-smbtorture: add test for Adobe PostScript driver (Win9x) installation.
s3-selftest: add WIN40 directory to print$ share.
s3-oldtest: add WIN40 to print$ share.
s4-smbtorture: make driver upload/removal more robust against empty filenames.
s4-smbtorture: make add-printerdriver test more robust against empty configfiles.
s4-smbtorture: add torture test for cupsaddsmb win9x driver install behavior.
s3-spoolss: Fix Bug #7641: handle win9x adddriver calls w/o config file.
s4-smbtorture: only run the cupsaddsmb adobe driver test against s3.
s3-waf: convert FNAME_UTIL into a subsystem.
s3-waf: convert LIBNMB into a subsystem.
s3-waf: convert REG_EVENTLOG into a subsystem.
s3-waf: convert TOKEN_UTIL into a subsystem.
s3-waf: convert PARAM_UTIL into a subsystem.
s3-waf: convert LIBCLI_SAMR into a subsystem.
s3-waf: convert LIBCLI_LSA into a subsystem.
s3-waf: convert LIBCLI_NETLOGON into a subsystem.
s3-waf: convert RPCCLI_SRVSVC into a subsystem.
s3-waf: convert RPCCLI_WKSSVC into a subsystem.
s3-waf: convert RPCCLI_SVCCTL into a subsystem.
s3-waf: convert RPCCLI_DSSETUP into a subsystem.
s3-waf: convert RPCCLI_INITSHUTDOWN into a subsystem.
s3-waf: convert RPCCLI_DFS into a subsystem.
s3-waf: convert RPCCLI_DRSUAPI into a subsystem.
s3-waf: convert RPCCLI_NTSVCS into a subsystem.
s3-waf: convert RPCCLI_EVENTLOG into a subsystem.
s3-waf: convert RPCCLI_EPMAPPER into a subsystem.
s3-waf: convert LIBCLI_SPOOLSS into a subsystem.
s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_SVCCTL.
s3-waf: let LIBSMB (in fact LIBNBT) depend on NDR_NBT.
s3-waf: let SMBD_BASE depend on NDR_NOTIFY.
s3-waf: add LIBDRSUAPI subsystem.
s3-waf: convert NPA_TSTREAM into a subsystem.
s3-waf: use TLDAP in smbtorture.
s3-waf: use SLCACHE in ntlm_auth.
s3-waf: convert SPNEGO_PARSE into a subsystem.
s3-waf: convert LIBNBT into a subsystem.
s3-waf: use LIBCLI_NDR_NETLOGON.
s3-waf: no need to compile ../librpc/ndr/ndr_compression.c twice.
s3-waf: convert IDMAP_ADEX into a subsystem.
s3-waf: convert IDMAP_HASH into a subsystem.
s3-waf: convert IDMAP_AD into a subsystem.
s3-waf: fix LIBNBT deps.
s3-waf: convert INIT_LSA into a subsystem.
s3-waf: convert INIT_NETLOGON into a subsystem.
s3-waf: convert INIT_SAMR into a subsystem.
s3-waf: convert RPC_SAMR into a subsystem.
s3-waf: convert RPC_LSARPC into a subsystem.
s3-waf: avoid module name uppercasing.
s3-waf: align some krb5/gssapi configure checks with classic build.
s3-waf: add idmap_ldap to default static module list.
s3-waf: add configure check for dirfd and build vfs_syncops vfs_dirsort if possible.
s3-waf: more krb5 configure checks.
s3-waf: more krb5 configure checks.
s3-waf: add krb5 configure checks for enctype 23.
s3-waf: add krb5 configure check for WRFILE_KEYTAB.
s3-waf: add pam configure checks.
s3-waf: fix pam dependencies of the RPC_SAMR server.
s3-waf: fix library names (we installed liblibsmbclient, etc.)
s3-waf: fix the build of nsstest in the non-devel build.
s3-waf: add support for --with-dnsupdate.
s3-waf: build vfs_fileid module if possible.
s3-waf: add valgrind configure checks.
s3-waf: add configure/declaration checks for fdatasync, readahead and splice.
nss_wrapper: make nss_wrapper.pl executeable.
s3-waf: add -Wl,--export-dynamic to LDFLAGS.
s3-selftest: support differing VFSLIBDIR in autoconf and waf build.
s3-waf: try to fix the build with snow leopard.
s4-smbtorture: paranoia check for architectures in request and reply for enumdrivers test.
s3-waf: use shared LIBASYNC_REQ subsystem.
s3-waf: convert lib/util_tdb.c into a subsystem.
s3-waf: convert UTIL_SRC into a subsystem samba-util, similar to the s4 one.
s3-waf: add CHARSET subsystem.
s3-waf: recurse into ../libcli/auth.
s3-waf: fix pamsmbpass libwbclient dependency.
s3-waf: check for "WITH_PAM_MODULES" to determine pam_smbpass build.
s3-waf: add pam_ and nss_winbind.
s3-waf: recurse into ../libcli/drsuapi.
s3-waf: recurse into ../libcli/named_pipe_auth.
s3-waf: recurse into ../libcli/samsync.
s3-waf: recurse into ../libcli/smb.
s3-waf: recurse into ../libcli/ldap.
s3-waf: add missing libnss_wins.so.2 library.
s3-waf: libwbclient does not depend on talloc anymore.
s3-waf: rework rpc_server handling a bit.
s3-waf: add libkrb5 winbind locator plugin.
s3-waf: fix winbind-client subsystem.
s3-waf: use shared libwbclient wscript_build.
spoolss: fill in PerMachineConnections add and delete IDL.
s4-waf: nsstest only needs replace.
s3-net: fix net sid type build warning.
s4-smbtorture: add torture_assert_strn_equal macro.
s4-smbtorture: skipping level 8 driveradds against w2k3.
s4-smbtorture: skip level 8 checks in test_GetDriverInfo_winreg for w2k3.
s4-smbtorture: pass down driverosversion to test_DriverInfo_winreg.
libcli/security: remove unused variable.
s4-smbtorture: check if returned driver paths match requested architecture.
s4-smbtorture: allow to call test_GetDriverInfo_winreg without printer handle.
s4-smbtorture: run the winreg tests also against an added driver.
s4-smbtorture: interesting, DriverDate and DriverVersion are different in w2k3 and w2k8r2.
s4-smbtorture: add torture_assert_nttime_equal macro.
s4-smbtorture: check the returned driver date is equal to the one we passed in.
s4-smbtorture: fix expected driver date REG_SZ string.
s4-smbtorture: always skip addprinter{ex} level 1 tests for now.
s3-spoolss: handle NTTIME(0) as "01/01/1601" REG_SZ in driver dates.
s3-printing: fix crash bug in print_spool_open().
s3-waf: fix the build.
testprogs: testspoolss.exe: pretty print FILETIME in driver info 6 and 8.
Holger Hetterich (2):
Fix bug #3185 - testparm exits 0 if it can read the config file regardless of errors
Updated french translations from Jean Delvare <jdelvare at suse.de>
Ira Cooper (1):
s3: Adding TCP_KEEPALIVE_THRESHOLD and TCP_KEEPALIVE_ABORT_THRESHOLD to the list of accepted socket settings.
James Peach (2):
smbtorture: Fix typo in status message.
smbtorture: correct error handling in BASE-OPEN.
Jelmer Vernooij (502):
pytdb: Make filename argument optional.
testtools: Import newer upstream revision.
Merge branch 'v4-0-stable' into newmaster
Open alpha 14.
s4-pidl-python: use correct talloc pointer when allocating subobjects.
pidl: Fix segfault when accessing unicode objects.
testrpc: Convert from a single unit test to a simple test script, be
s4-pild-python: Fix assignments - even though we reference the mem_ctx
pytestrpc: Be more verbose.
rpc_talloc: Update test now that we create fewer references.
pidl/python: Allow passing in UTF8 string objects as well as unicode
pytalloc: Add default compare function.
s4: Add convenience script for building and landing a tree in the
s4: Add script for landing a branch through a remote server, such as sn.
pymessaging: Remove unused older python irpc bindings.
s4-land: Print commands that are being run.
strlist: Make test names unique.
selftest: Fix generation of test id file.
torture: Fix running individual tests.
s4-test: Allow running individual tests for smbtorture tests.
torture: Remove active_testname variable.
s4-selftest: Use loadlist in a couple more places.
selftest: Support running individual tests using idlists, for testsuites that support them.
selftest: Use idlist testing for python tests.
selftest: Fix run for systems without testtools installed.
s4-selftest: Move more tests to scripting/python, simplifies running of tests.
selftest: Let tests add prefix to tests by themselve.
s4/selftest: Simplify running of python tests.
ndrdump: Move blackbox test to standard python namespace.
subunithelper: Cope with errors outside of testsuites.
pygensec: Implement start_mech_by_name().
s4-param: Check type when converting python object to lp_ctx, fix some
s3-selftest: Fix test prefixes in subunit output.
s4-param: Fix more memory leaks, invalid memory context.
ldb: Depend directly on replace, fixes the build on systems with
ldb: Use waf as default build system.
dsdb: Use short path for ldb_handlers.h, in case ldb is installed in the
selftest: Remove unused --analyse argument.
selftest: Add prefix on a higher level, so it can be more easily
s4-selftest: Cleanup formatting.
selftest: Fix use of --load-list.
s4-selftest: Add environment name to test suite manually, so we can
s4-selftest: For idlist tests, leave out environment name.
selftest: Fix idlist running.
selftest: Fix testsuite counts when running only a limited number of
smbtorture: Use subunit C library.
torture: Use system subunit library if available.
smbtorture: Report times.
s4-selftest: Fix prefixes for ldb tests - they're samba4 specific.
s4-selftest: Move samba3sam test to standard python directory.
s4-selftest: Move credentials tests to standard python directory.
torture: Remove unused variable.
selftest: Use variable for clientdir.
selftest: Pass prefix to setup_env function.
tevent: Switch to using waf by default.
tevent: Add infrastructure for python bindings.
selftest: If a testsuite is killed by a signal, let selftest die.
pytevent: Fill in client side fnuctions.
pytevent: Add more tests.
Check in configure/Makefile for those projects that have waf as primary build system.
pyteven: Fix build warnings.
Add dedicated exception for immediate failure in filter-subunit, don't raise it on known exceptions.
selftest: Abort early on SIGPIPE.
format-subunit: Display number of failed tests even if there are no
ldb: Bump version because of addition of ldb_req_location.
ldb: Remove samba-specific targets from Makefile.
ldb: Update autogen-waf.sh to no longer overwrite existing files.
tevent: Don't update Makefile/configure files.
tevent: Remove make targets that are not relevant for tevent.
ldb/tevent: Fix detection of waf paths.
samba4: Don't update Makefile/configure from autogen.sh.
ldb: Fix path to alternative buildtools.
testtools: Import new upstream snapshot.
subunit: Import new upstream snapshot (adds subunit_progress())
selftest: Avoid accessing deprecated BaseException.message.
selftest: Eliminate some unnecessary spaces.
s4-selftest: Add some more comments to skip file.
s4-selftest: Convert tests.sh to Python.
s4-selftest: Finish conversion of selftest.sh to Python.
s4-selftest: Normalize paths.
s4-selftest: Remove unnecessary PYTHONPATH overrides.
delete_object: Remove unnecessary pass calls.
selftest: Let selftest provide the tempdir, rather than creating it as sideeffect of tests.py.
pidl: Fix handling of typedefs of typedefs.
autobuild: Simplify find_git_root.
autobuild: Remove autogen step for projects that have checked in configure.
autobuild: Add --daemon option.
Remove land.py - it's been obsoleted by autobuild.py.
autobuild-remote: Support autobuild.py rather than land.py.
autobuild: Add --always-email option.
autobuild: Provide more information about build sequence, stage name and output mime type (all plain text for now).
s4: Add 'subunit-test' make target.
s3-configure: Require at least version 1.2.6 of external TDB, which has
s3: Add subunit-test target.
s3-selftest: fix prefix in subunit output.
autobuild: Output test results in subunit.
autobuild: Avoid unnecessary chdir() calls.
Split land.py back out of autobuild.py, so I can change it without
land: Avoid more uses of chdir().
land: Move more functionality onto builder.
land: Add --repository option.
land-remote: Use --repository option.
land-remote: Checkout repository first.
land: Avoid running things in a shell where not necessary.
Several smaller cleanups, use python coding style.
land: Add --fail-slowly option.
land: Only pass shell=True if necessary.
land: Move stage building into a separate class so we can have subclasses (e.g. subunit-specific).
land: Cherry-pick tridges changes to autobuild.
land: Add separate treestagebuilder for subunit.
selftest: Move plain text formatter to subunithelper.
format-subunit: Split out summary file writing.
subunithelper: Make filter options optional.
land: Implement --fail-immediately directly in Python, provide subunit file.
subunithelper: Fix format time.
subunithelper: Remove accidentally added line.
pytdb: Include Python.h first to prevent warning.
land-remote: Pass extra arguments on to land.
land-remote: Run remote land command unbuffered.
land: Add --revision argument.
land: Attach test output files to result emails.
land: Some cosmetic fixes.
land: Attach tarball of logs rather than individual logs to keep the
land: Force always emailing when there is no other mechanism of progress reporting.
heimdal: convert some subsystems to libraries, consistent with upstream heimdal.
heimdal: Convert hx509 to library.
pidl: simplify some generated code.
pidl: Allow longs for bitmasks.
land: Inherit EMAIL from the environment.
wafsamba: Move heimdal library code to heimdal_build.
heimdal: Move autoproto code to heimdal_build.
heimdal: Move SAMBA_ERRTABLE to heimdal_build.
heimdal: Move asn1 list to heimdal_build.
wafsamba: Some reformatting.
registry: Make a two more functions static.
pytdb: Add __version__ attribute.
waf: Add function for checking for system python modules.
tdb: Support using system pytdb.
tdb: Only use system pytdb when using system tdb.
land-remote: Announce what address email is going to be sent to.
land-remote: Force running in foreground when pushing to master.
heimdal: Support using system com_err.
compile_et: Support using system compile_et.
heimdal: Fix names of roken, wind libraries.
heimdal: Fix library name of gssapi.
heimdal: Fix library name of heimntlm.
heimdal: Fix name of 'hdb'.
heimdal: Fix name of kdc library.
heimdal: Fix name of hx509 library.
heimdal-build: Add custom heimdal generator.
heimdal-build: Add heimdal specific subsystem function.
heimdal-build: Implement HEIMDAL_LIBRARY with fewer wafsamba functions.
heimdal-build: Add HEIMDAL_BINARY convenience method.
heimdal-build: Simplify calls to convenience functions.
ldb: Refer to ldb(3), not ldb(7).
Add missing dependencies for com_err.
land: Simplify retry checker.
land: Fix failure detection.
land: Print out failed test in case of subunit failures.
land: Fix stage description during failure.
heimdal-build: Require com_err library to provide com_right_r function.
land: Use temp dir if /memdisk is not available.
talloc: Fix #include line in manpage.
heimdal_build: Fix dependencies for hx509.
wafsamba: Clarify needs_python argument name, use pyembed/pyext where
wafsamba: Fix init function when building modules as shared objects.
tls: add missing dependency on util_tevent.
samdb: Handle schema setup in samdb, not in more generic ldbsamba.
samdb: Add flags argument to samdb_connect().
ldb-samba: Add convenience function for doing a Samba-style LDB init.
ldb-samba: Split up ldb_wrap_connect() a bit.
ldb-samba: Add ldb_wrap_add, remove last schema reference from ldb_wrap.
cldapd: Add missing dependency on ldbsamba.
secrets: Add missing dependency on ldbsamba.
idmap: Add missing dependency on ldbsamba.
gensec: Support building without any linked-in modules.
dsdb: Move attr_in_list to SAMDB_COMMON to avoid circular dependency between SAMDB_COMMON and DSDB_MODULE_HELPERS.
ldb-samba: Rename samdb_relative_path to ldb_relative_path, as it's not samdb-specific.
dsdb: add missing dependency on samba_socket.
util: Link headers to correct subsystem, fix formatting.
samdb: Remove dependency on unknown subsystem.
rpc_ndr_netlogon: Add missing dependency on tevent.
dsdb modules: Split ridalloc out of common helpers, because of dependency loops.
libcli-auth: Remove unnecessary dependency on libsamba-hostconfig.
libsecurity-common: Add missing dependency on libndr.
ntvfs_ipc: add missing dependency on dcerpc_common.
dsdb/schema: Move some dsdb_dn functions that are schema-specific.
librpc: Remove unnecessary dependency on libsamba-hostconfig.
smb2: Add missing dependency on NDR_DFSBLOBS.
smb_server: Split core out of service, since the service can be built as a .so against which we can't link.
kdc: Add missing dependency on samba_gensec_server.
ldap_server: Add missing dependency on gensec_server_start.
torture: Link against rpc server itself, not service module. (against which we can't link).
wafsamba: Support setting pyembed on libraries.
torture_auth: Add missing dependency on gensec_ntlmssp.
dsdb/modules: Split up helpers a bit to prevent recursive dependencies.
wafsamba: Fix handling of pyembed/pyext.
service: Add missing dependency on process_model.
server: Add missing dependency on schannel database.
credentials: Move code that doesn't need any external dependencies into
auth: Remove unnecessary dependencies, fix formatting.
kerberos_util: Put into separate subsystem.
credentials: Split up into several subsystems.
credentials: Fix the build.
util: Fix installation path of tevent_ntstatus.h, tevent_unix.h (bug 7720).
credentials: Avoid unnecessary includes.
popt_credentials: Implement pending machine account manually, rather than through credentials.
samdb_common, ntlm: Add missing dependency on libsamba-hostconfig.
ldb: Build ildap module as shared object.
land-remote: Fix --fail-slowly.
wins_ldb: Build as shared library.
dsdb: Build some more modules as .so files.
selftest: Avoid check_call(), use call() instead. This should fix
dsdb: Build some more modules as shared object files.
dsdb: Build some more modules as shared objects.
dsdb: Build more modules as shared objects.
wafsamba: Warn about circular dependencies between libraries.
torture/becomedc: Add test for global schema, use samdb_connect().
samdb: Build as library.
dsdb/schema_load: Build as shared object.
dsdb/schema_data: Build as shared object.
wafsamba: Don't allow circular dependencies involving libraries by
wafsamba/developer: Forbid shared objects with unresolved symbols, if
ldb: Only build LIBLDB_MAIN when building ldb itself.
samdb: Set soname.
heimdal: Add sonames.
heimdal: Add soname for com_err.
heimdal_build: Allow using system wind.
heimdal Add missing dependencies on wind.
heimdal_build: Use existing functions for finding system libraries.
heimdal: Support using system roken.
heimdal_build: Put version objects in a separate subsystem.
heimdal_build: Fix build with system roken.
heimdal_build: Support using system hx509 library when explicitly
heimdal_build: Initial work on supporting an external heimdal library.
heimdal_build: Add comment with stub for finding the system libtommath.
heimdal_build: Skip some hx509 code when using system hx509.
heimdal_build: Support using system asn1 library.
heimdal_build: Remove ignored argument ldflags from HEIMDAL_BINARY().
heimdal_build: Fix detection of system roken library.
heimdal: Simplify handling of ../heimdal prefixes in HEIMDAL_SUBSYSTEM.
heimdal: Add variables for source files.
heimdal: Call HEIMDAL_AUTOPROTO_PRIVATE() manually.
heimdal: Call HEIMDAL_AUTOPROTO() manually.
heimdal: Add convenience functions for finding heimdal paths.
heimdal: Allow leaving off ../heimdal prefix for source files.
heimdal: Allow leaving off ../heimdal prefix for proto headers.
heimdal: Allow leaving off prefix for HEIMDAL_ASN1().
heimdal: Allow leaving off prefix to HEIMDAL_ERRTABLE().
heimdal: Leave off ../heimdal prefix to HEIMDAL_BINARY().
heimdal: Allow leaving off prefix from asn1 option_file.
heimdal: Remove some unused arguments from HEIMDAL_SUBSYSTEM().
heimdal: Add local simpler copy of to_list().
tdb: Bump version to 1.2.7 after addition of pytdb.__version__.
dcerpc_samr: Fix -l arguments for dcerpc_samr and dcerpc_atsvc.
dsdb: Module aliases require to be prefixed with the subsystem name.
heimdal: Attempt to fix path of hdb_asn1.h
heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG.
tdb: Set _PUBLIC_ in C file rather than header files (Debian bug 600898)
Lowercase socket_wrapper name.
tdb: Revert re-addition of tdb_set_logging_function.
ldb: Install pyldb-util as public library.
ldb: Install pkg-config file for pyldb.
ldb: Support using system pyldb library.
waf: Rename some BUNDLED_ functios to PRIVATE_.
s4: Rename LIBNETIF to libnetif.
s4: Rename NDR_TABLE to ndr_table.
s4: Rename LIBEVENTS to libevents.
s4: Rename WRAP_XATTR to wrap_xattr.
s4: Rename UID_WRAPPER to uid_wrapper.
s4: Rename NSS_WRAPPER to nss_wrapper.
waf: Rename LIBWINBIND-CLIENT to libwinbind-client
s4: Rename SAMDB_COMMON to samdb_common.
s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}
s4: Rename LIBSAMBA-* to libsamba-*
waf: Lowercase several library names.
s4: Rename SMBPASSWD to smbpasswd.
s4: Rename DB_GLUE to db_glue.
s4: Rename WBCLIENT to wbclient.
s4: Rename LIBCLI_LDAP to libcli_ldap.
s4: Rename LIBCLI_NBT -> cli_nbt.
ldb: Rename pyldb pkg-config file to pyldb-util, to avoid confusion with
torture/local: Depend on NSS_WRAPPER, even if it wasn't enabled.
s4: Drop duplicate 'lib' prefix for private libraries.
dcerpc_dns: Change back to subsystem for the moment.
waf: build private libraries with so names.
torture_local: Add missing dependency on socket_wrapper.
waf: Remove lib prefix from libraries manually.
waf: Don't auto-lowercase library names.
waf: Stop automaticaly changing dashes to underscores in library names.
waf: Only specify vnum for non-private libraries.
talloc: Move pytalloc to lib/talloc.
talloc: Avoid dependency on unknown EXT_LIB_PYTHON.
waf: Remove unused EXT_LIB_PYTHON.
talloc: Install pytalloc-util as system library.
talloc: change pytalloc-util to be a public library.
wafsamba: Fix soname for standalone private libraries.
talloc: Fix manual pages in standalone build.
talloc.3: Remove documentation for deprecated talloc_append_string,
replace: Only build replace-test in standalone build.
replace: Avoid autoproto as it breaks standalone builds.
tevent: Drop autoconf-based build system for standalone build.
ldb: Drop autoconf-based build system.
replace: Fix formatting.
s4: Remove the old perl/m4/make/mk-based build system.
talloc: Switch over to using waf as the default build system for the standalone build.
replace: Build using waf by default.
replace: Look harder for waf.
talloc: Look harder for waf.
replace/talloc: Avoid automatically pulling in new configure/Makefile,
tdb: Use waf by default.
talloc: Install pytalloc.h.
filter-subunit: Add --fail-on-empty argument.
pydsdb: Import testtools before subunit for those that don't have
possibleinferiors: Fix formatting.
possibleinferiors: Report subunit.
urgent_replication: Fix formatting
samba: Make in_source_tree() public.
provision: Look for in source setup data first, in case an older version
selftest/tests.py: Fix typos.
urgent_replication: Fix syntax error.
selftest: Allow some tests to output empty subunit data.
urgent_replication: forbid empty subunit output.
selftest: Allow some tests to output empty subunit data.
samba_utils: Use LIBDIR rather than assuming it is set to $prefix/lib.
Add --with-privatelibdir build option.
Add --disable-rpath-private-install flag.
wafsamba: Support expanding variables in LIBDIR/PRIVATELIBDIR variables.
wafsamba: Drop private library prefix when installing private libraries
wafsamba: Use project name variable rather than hardcoding 'samba4'.
waf: Put private libraries in a separate directory when building.
talloc: rename pytalloc.c to pytalloc_util.c
talloc: Add python talloc module, move convenience functions to it.
pytalloc: Make some arguments optional.
samdb: Make private (at least for the moment).
samdb: Lowercase library name.
ldbsamba: Lowercase library name.
credentials: Lowercase library name,
Lowercase DNS_UPDATE_SRV name.
s4-waf: Only enable various wrappers if they're actually used.
heimdal_build: Add missing dependency on replace, necessary because replace.h is included.
socket_wrapper: Only add as global dependency when enabled.
unix_privs: Add missing dependency on libreplace.
torture: Only add in tests for socket_wrapper/nss_wrapper when they have been enabled.
wafsamba: Support make dist from bzr checkout.
sambaversion.py: Some cleanups, make less git-specific.
Put git tree finding into a separate function.
samba_version: Cope with building snapshots in directories without git checkout.
samba_version: Support retrieving snapshot identity from bzr.
samba_version: When working from git checkout, display git revision SHA1 rather
s4: Remove obsolete mkversion.sh
s3: Rename GIT_COMMIT_{TIME,DATE} to COMMIT_{TIME,DATE}.
waf/samba_version: Support integer defines.
samba_version: Simplify dirty tree detection.
samba_version: Make COMMIT_IS_CLEAN an int rather than a string.
waf/samba_version: Simplify git show command.
Don't build ldb tools when there is a system provided ldb.
Re-enable ldb-cmdline for the moment, as it is used by oLschema2ldif.
Add myself as maintainer for pytevent, pytalloc, pytdb and pyldb.
Build wrepl server as service by default.
winbind: Build as shared module.
kcc/drepl: Build as service.
web_server: Build as module.
s4/dns: Build as shared module.
auth/ntlm: Use name consistent with other service names.
kdc: Build as shared module by default.
cldap: Build as shared module.
s4: Build ldap and samba3_smb services as shared modules.
nbtd: Build service as shared module.
heimdal_base: Add missing dependency on replace.
smb_server: Build as shared module.
heimdal_base: Fix include path so heim_threads.h can be found.
subunithelper: Exit with 1 if more than zero testsuites failed or
selftest: Even if setting up an environment failed, the next tests may
selftest: When running on the buildfarm, pipe everything through
service_ldap, service_smb: Lowercase output file names.
pyldb: Fix broken test.
selftest: Allow using ldb* utilities from system.
blackbox.ldb: Support using system ldbsearch.
show_test_time: Move to root scripting directory as it's useful for s3
samba.tests: Fix formatting.
Makefile: Add rule for pydoctor.
s4-python: Fix formatting of docstrings for the purpose of pydoctor.
samba.provision: Add package with provision and backend modules.
samba.provision: Fix setup_path.
s4-selftest: Ignore broken pipe error from grep.
chgtdcpass: Fix program name in usage message.
samba.getopt: Fix missing import of sys.
samba.hostconfig: Move samba.shares into samba.hostconfig.
samba.upgradehelpers: Simplify code a bit.
s4-python: Some reformatting for the purpose of pydoctor.
samba.tests.hostconfig: Fix import.
samdb: Build as public library.
samba_dist: Fix dist for subprojects.
wafsamba: Only use private library rpath when linking against private
wafsamba: Fix indentation.
talloc: Add talloc object.
pidl: Base new objects off of talloc object.
pytalloc: Add convenience function for checking if something is a talloc
pidl: Allow more flexibility importing modules using convenience function.
pidl/python: Allow import of talloc, even though it doesn't live in the
pytalloc: Expose PyTalloc_GetObjectType
pycredentials: Use talloc.Object.
pygensec: Use talloc.Object.
pyauth: Use talloc.Object.
pyregistry: Use talloc.Object.
pyparam: Use talloc.Object.
pytalloc: Make py_talloc_default_repr private (now exposed by talloc.Object).
pytalloc: Make py_talloc_dealloc private.
pytalloc: Make py_talloc_default_cmp private.
pygensec: Fix initialization.
talloc: Bump version number after pytalloc changes.
wafsamba: Override GIT_DIR without using putenv.
wafsamba: Only include versioned files when building tarball from bzr.
s4-python: Add some more module docstrings.
s4-python: Add more module docstrings.
pytalloc: Add docstring for talloc.Object.
ldb: bump version number after introduction of new constant.
selftest: Document --testenv in --help output, remove documentation for
selftest: add --list option.
testtools: Import new upstream snapshot.
subunit: Update to newer upstream snapshot.
dnspython: Update to newer upstream snapshot.
selftest: Rename $LIST to $LISTOPT for consistency with testrepository.
subunitrun: Support --list.
selftest: Allow discovering tests in pure python testsuites.
s4-selftest: Add convenience function for running testsuites using
selftest: Check exit code when listing tests.
smbtorture: Rename --list to --list-suites, add stub --list.
selftest: Make sure system subunit.run has TestProgram.
s4-python: Split up ensure_external_module.
s4-python: Fix use of bundled modules.
s4-dist: Remove no longer existing files from blacklist (fixes 'make
subunitrun: Remove global subunit module when reimporting from a
subunitrun: Extend hack to cope with older system subunit run installs.
s4-python: Add convenience function for forcibly importing bundled
subunitrun: Use unittest.TestProgram if subunit.TestProgram is not
talloc: Add ability to generate Python docs using pydoctor.
s4-smbtorture: Make test names lowercase and dot-separated.
smbtorture: Implement --list argument.
smbtorture: Default to listing all tests if no prefix was specified.
filter-subunit: Add --list argument.
selftest: Support multiple instances of $LISTOPT.
selftest-s4: Support listing smbtorture4 tests.
Move get_loadparm() and get_credentials() to samba.tests.TestCase.
join: Properly cancel transaction on exceptions.
ldb: Build modules as .so files.
ldb: Bump API after symbol changes.
heimdal_build: Simplify library handling.
Simplify link installation.
wafsamba: Move version script handling out of SAMBA_LIBRARY.
wafsamba: Don't build vscript for modules.
heimdal_build: Simplify version_script handling.
wafsamba: Specify full vscript path so non-autogenerated files are possible, too.
heimdal_build: Add version-script for com_err.
heimdal_build: Add version-script for roken.
heimdal: Add version script file for hcrypto (unused so far, as hcrypto still needs to be made a proper library).
heimdal_build: Add version-script for ntlm.
heimdal_build: Add version-script for wind.
heimdal_build: Add version-script for kdc.
heimdal_build: Add version-script for hdb.
heimdal_build: Add version-script for asn1.
heimdal_build: Add version-script for gssapi.
heimdal_build: Add version-script for krb5.
heimdal_build: Add version-script for heimdal_base, hx509 and hcrypto. Convert hbase and hcrypto to libraries.
heimdal_build: Simplify HEIMDAL_LIBRARY - version_script files are now taken from upstream rather than generated.
wafsamba: Use abi_match in version script files.
Add bzrignore symlink.
pidl: Use system pytalloc if possible.
ldb: Rename two exported functions so they match abi_match.
ldb: Add prototype for ldb_init_module.
ldb: Rename last instance of save_controls -> ldb_save_controls.
ldb_map: Fix prefix for map functions.
ldb: Rename controls_except_specified -> ldb_controls_except_specified.
pidl: Add prototype for init function in pidl-generated Python bindings.
pyglue: Add prototype for init function.
pyrpc: Add prototype for init function.
dcesrv_srvsvc: Use constants.
ldb: Bump version after renaming some public symbols which didn't have a
heimdal: Fix build if using system roken.
testtools: Merge in new upstream.
dnspython: Merge in new upstream.
ldb: Add ldb.Message.add and ldb.Message.elements.
pytdb: Make PyTdb variable static.
tdb: Bump version number after symbol versioning changes.
tevent: Bump version number after symbol versioning changes.
talloc: Remove reference to nonexistant configure.developer in autogen.sh.
tevent: Remove reference to nonexistant configure.developer from autogen.sh.
wafsamba: Allow newer or the same python module versions to be installed,
heimdal_build: Allow using system hbase and hcrypto.
heimdal_build: When using system hbase/hcrypto, don't compile our own versions.
heimdal_build: Use consistent name for heimbase.
MAINTAINERS: List tridge and me as maintainers of wafsamba and the wscripts.
MAINTAINERS: add rusty as the tdb maintainer.
MAINTAINERS: List rusty and tridge as maintainers for talloc.
tdb: Remove autotools support.
talloc: remove autotools support.
wafsamba: Fix handling of nick name in VERSION.
WHATSNEW: Fix typo, indentation.
update whatsnew for alpha14.
mkrelease: Simplify further.
Release alpha14.
Jeremy Allison (89):
Fix bug #7693 - smbd changing mode of files on rename
Thank goodness for code reviews. Volker caught - this should be lp_posix_pathnames()
Fix bug 7694 - Crash bug with invalid SPNEGO token.
Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request.
Change to using TDB_INCOMPATIBLE_HASH (the jenkins hash) on all
Small tweak to bugfix for 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
Add torture test BAD-NBT-SESSION as regression fix for bug 7698 - Assert causes smbd to panic on invalid NetBIOS session request.
Fix bug 7704 - Possible error in fix to rpc_server/srv_spoolss_nt.c.
Fix crash in SMB2 rename found by gentest. We must always have an lcomp
Fix crash in SMB2 rename found by gentest. We must always have an lcomp
Fix bug 7716 - acl_xattr and acl_tdb modules don't store unmodified copies of security descriptors.
Add some const. Needed for my SD work.
More neccessary const.
Make the posix ACL module cope with a NULL incoming DACL and a
Canonicalize incoming and outgoing ACLs.
Make the vfs_acl_xattr and other modules work with NULL SD's. Fix
Fix bug #7733 - Invalid client DOS attributes on create can cause incorrect unix mode_t to be generated.
Fix bug #7734 - When creating files with "inherit ACLs" set to true, we neglect to apply appropriate create masks.
Fix valgrind "uninitialized read" error on "info" when returning !NT_STATUS_OK.
Add debug message to get_nt_acl_internal() to see what we got.
Fix "force unknown ACL user" to strip out foreign SIDs from POSIX ACLs if they can't be mapped.
Fix handling of "NULL" DACL. Map to u/g/w - rwx.
Add make_default_filesystem_acl() function to be used in following change to acl_xattr and acl_tdb module.
Add acl_xattr:ignore system acls boolean (normally false) to allow
Ensure we have correct parameters to use Windows ACL modules.
Don't arbitrarily clean all parametric options in add_a_service(),
Move tcons.num_open from smb1 to sconn->num_tcons_open as this is needed for SMB2 also.
Copyright/whitespace/comment cleanup in preparation for adding SMB2 paths.
Add SMB2 paths to smbd/conn.c. Except for conn_idle_all(), to be cleaned up next.
Add deadtime detection for SMB2. Correctly update lastused timestamp across all active tcons. Should fix dfree cache not updating bug.
Fix shadow warning for "access" variable.
Make getpwnam_alloc() static to lib/username.c, and ensure all username lookups go
Add code to implement SeSecurityPrivilege in net rpc rights, and in the
Now we have SeSystemSecurity, remove the source3-only #ifdef.
Fix const warning. Allocate off NULL as we always talloc_free().
Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed
Revert "Wrap security_token_has_privilege() with a check for lp_enable_privileges(). Needed"
Fix for bug 7755 - SMBC_getdents_ctx() ignores struct alignment rules
Fix bug #7700 - Improvement of return code of smbclient
First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
Ensure we always have a mapped group for "Domain Users".
Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
Remove fstring from map_username. Create a more sane interface than the called-parameter-is-modified.
Ensure we check the return from make_user_info before dereferencing the value returned by it.
Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when adding new share via MMC
Fix memleak I accidently introduced when reading from tdb.
Add test that detects problems in the SMB signing code when run through cli_write() (which doesn't use the new async methods).
Fix bug #7791 - gvfsd-smb (Gnome vfs) fails to copy files from a SMB share using SMB signing.
Move error reporting of messaging context creation fail into
Fix the unexpected.tdb database problem. Change nmbd to store the
Move the uglyness of #ifdef REALPATH_TAKES_NULL into the vfs_default
Fix bug #7785 - atime limit.
Fix bug #7812 - vfs_acl_xattr/vfs_acl_tdb: ACL inheritance cannot be disabled
Add in fsp->access_mask checks. Not required (underlying system does this)
Fix bug discovered with "encryped passwords = no".
Fix a typo - should be '&&' not '&' when checking for privileges.
Turns out there are lots of places in S3 where token passed in
Fix bug #7835 - vfs_fill_sparse() doesn't use posix_fallocate when strict allocate is on
Move posix_fallocate into the VFS where it belongs.
Oops. Missed adding vfswrap_posix_fallocate to vfs_default_fns table.
Merge the two conflicting allocation codes into one function, vfs_slow_fallocate()
posix_fallocate() returns an errno, not -1 on error.
Replace lseek()/write()/lseek() triple with pwrite call. We already emulate this
s3: Fix bug 7843: Expand the local SAMs aliases
Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to 128 credits.
Add documentation for "smb2 max credits".
Remove extra unused credit arg. to smbd_smb2_request_setup_out()
We need to start off with smb2.credits_granted == 0. That way
As we handle missing sendfile() inside lib/sendfile.c, remove the WITH_SENDFILE ifdefs.
Change crediting so that the credits are returned on the interim async response.
Ensure we use vfs_fsp_stat(), not VFS_STAT directly, and store into fsp->fsp_name->st
Change interface of schedule_smb2_aio_read() to allocate the return DATA_BLOB.
Fix read/write calls over sockets to cope with EAGAIN/EWOULDBLOCK for non-blocking sockets.
Implement "use sendfile = yes" for SMB2. (cherry picked from commit 95cb7adcd03a1abbd0af395b6c96dd8e0eebd3d1)
Protect the onefs sendfile from EAGAIN/EWOULDBLOCK.
Fix bug 7866 - "net" in v3-6-test broken.
Change strict allocate to default to true. (cherry picked from commit 820ea22a07b062b1717d35de8fa7051fc1067c3f)
Fix old bug in openX code, exposed when "strict allocate" is set to true.
Do more vfs_stat_fsp calls instead of FSTAT - ensures fsp->fsp_name->st is kept up to date.
Update our attribute flags.
file_set_sparse needs to be a handle based call.
Move checks inside file_set_sparse() to allow it to be called from anywhere.
Rename vfs operation posix_fallocate to just fallocate and add the vfs_fallocate_mode parameter.
From metze's work on sparse attributes. FILE_ATTRIBUTE_SPARSE is valid on get but not on set.
Added call out to a Linux-compatible fallocate() when we need to extend a file
Keep track of the sparse status of an open file handle. Allows bypass of
My algorithm for determining whan an incoming sequence number can be allowed is incorrect.
Fix a warning message.
All calls to event_add_to_select_args() call GetTimeOfDay() and
Joerg Pulz (1):
Make 'net rpc printer driver' behave the same as rpcclient enumdrivers
Julien Kerihuel (1):
Add ncacn_http (RTS) IDL implementation in dcerpc.idl
Kai Blin (43):
s3-waf: Build libwbclient as dynamic library
s3 waf: Remove iniparser source list from source3/wscript_build
s3 waf: more correctly generate symbols for pdb/vfs/auth/etc. modules
IDL: More types for the DNSP IDL file
ndr: Add support for pulling/printing an ipv6address type
ndr: Implement push function for IPv6 addresses
dnsp: Allow parsing of AAAA records
dnsp: Add MX record parsing
dnsp: Parse TXT records
dnsp: Add support for parsing HINFO records
libwbclient: Remove half-finished async implementation
lib/util: Add tevent WERROR wrappers
s4 socket: increase the debuglevel to make add interface debug messages less verbose
s4 dsdb kcc: Prefer msDS-hasMasterNCs over hasMasterNCs when replicating
s4 dns: Import DNS win32 error codes from MS-ERREF
netlogon.idl: Switch to explicit constants to remove dependency on nbt.idl
idl: Add idl describing DNS structures
dns/nbt: Fix spelling of the "authoritative" flag.
s4 dns: Add a boilerplate DNS server implementation
ndr dns: Add simple parser
s4 dns: Reply to a name request with an A record.
dnsp: Can't have two memebers of a union with the same name
s4 dns: Fix a data corruption in the dns_string parsing
s4 dns: Look up records in the ldb database
s4 dns: Look up all names in the ldb database.
s4 dns: Handle CNAME records
s4 dns: Allow more components as part of a domain name
s4 dns: start handling update requests, return correct error codes
s4 dns: Better error handling when parsing invalid or unknown records
s4 dns: Map between NTSTATUS and dns error codes
s4 dns: More work on updates
s4 dns: Split up the code into multiple files for easier development
s4 dns: Switch to WERROR
s4 dns: Add a prerequisites check for updates
s4 dns: Add stub checking if updates are allowed
s4 dns: Implement update record prescan logic
ndr: Make sure ndr_dns.c has no lines wider than 80 chars
s4 net: rename to samba-tool in order to not clash with s3 net
tevent: Fix docstring, tevent_req_is_in_progress does not destroy private data
s3 docs: Reword posix locking text to answer a common question
ndr: Another try to support the build on non-IPv6 systems
s4: Implement UDP echo server example
s4 libcli: Add libcli_echo lib and torture test
Kamen Mazdrashki (158):
s4-pyrpc: Print location and type name we got when checking for types
s4-dsdb: Add dsdb_schema_info_blob_is_valid() to verify schemaInfo blobls
s4-prefixMap: use dsdb_schema_info_blob_is_valid() for schemaInfo blob validation
s4-schema: use dsdb_schema_info_blob_is_valid() to verify schemaInfo blob
s4-schema: Helper func to compare schemaInfo signitures
s4-test: Add unit test for dsdb_schema_info_cmp()
s4-ldapcmp: Fix options parsing for common Samba options
werror: Add W_ERROR_HAVE_NO_MEMORY_AND_FREE() macro
s4-drs: Check for schema changes only in case we are *not* applying Schema replica
s4-devel-getncchanges: Add common Samba options as a group to be displayed
s4-dsdb-schema_prefixmap: Print debug message when internal failure occurs
s4-dsdb-schema_prefixmap: return WERR_DS_NO_ATTRIBUTE_OR_VALUE when ATTID is not found
s4-test: yet another test for ATTID-ot-OID conversion
s4-ldapcmp: Enable comparisons between LDBs too
s4-drs-test: Relax a check that may possibly fail
s4-ldapcmp: Extend ldapcmp to be able to compare more than one context at a time
s4-ldapcmp: Fix usage of 'paged_search' module for remote LDB connections
s4-dsdb_schema_info.py: Fix usage of 'paged_search' module for remote LDB connections
s4-ldap_schema.py: Remove unused LDB connection to GC port
s4-sec_descriptor.py: Fix usage of 'paged_search' module for remote LDB connections
s4-delete_object.py: Fix usage of 'paged_search' module for remote LDB connections
s4-fsmo.py: Fix usage of 'paged_search' module for remote LDB connections
s4-possibleinferiors.py: Fix usage of 'paged_search' module for remote LDB connections
s4-python-samba: Fix few cosmetics
s4-samba.samdb: Fix leading indention and trailing ';'
s4-python-samba: 'file' is a built-in
s4-samba.samdb: Fix masking names from outer context
s4-python-test: Implement global connect_samdb() function
s4-test-delete_object.py: Use common implementation for connect_samdb()
s4-test-fsmo.py: Use common implementation for connect_samdb()
s4-python-samba: Remove trailing ';'s
s4-python-test: Common implementation for getting environment variable value
s4-test-delete_object.py: Use common implementation for env_get_var_value()
s4-test-fsmo.py: Use common implementation for env_get_var_value()
s4-test-dsdb_schema_info.py: Simplify connection SamDB
s4-test-dsdb_schema_info.py: Get rid of global module variables
s4-test-fsmo.py: Implement kind of busy-wait for role transfer
s4-getopt.py: Make Anonymous creds when no credentials
s4-ldapcmp.py: Don't guess credentials for second Credentials object
s4-test: Use absolute path for 'samba4srcdir'
s4-test: Fix PYTHONPATH for python.drs_ tests
s4-libnet_vampire: Reparent result.lp_ctx - we have already referenced it
s4-provision: Reset "debuglevel" after "provision" take place
heimdal-com_err: fix the build for systems with older 'com_err' library
s4-test: Fix PYTHONPATH for samba4.schemaInfo.python(dc) test
pytalloc: Fix warning that we are subtracting void* pointers
s4-test-msds_intid: Simplify parameters for _make_error_message() function
s4-test-msds_intid: Verify ATTIDs for Linked Attributes
subunithelper: Don't access 'message' attribute directly as it deprecated
s4-dsdb: Make dsdb_setup_sorted_accessors() public
s4-dsdb-repl: Print what the error code for failure is
s4-vampire: Initial implementation for multi-pass schema decoding from DRS data
s4-vampire: Optimize Schema decoding conversion
s4-libnet_vampire: Remove unused self_corrected_schema
lib/util/asn1.c: comment spelling
asn1_tests.c: Make test data static const
s4-schema_init: Print more info about syntax we fail to recognize
pytalloc: use talloc_unlink() to free py_talloc objects
asn1: ber_write_OID_String() to be more picky about supplied OID
asn1_tests: Implement negative unit-tests for ber_write_OID_String()
s4-dsdb/schema_syntax: Separate validation for numericoid OID values
s4-dsdb_syntax: Setup "String(Case Sensitive)" syntax
s4-test: Print correct partition DN in msDSIntId test
s4-test: Extend DRS-msDSIntId test to verify Configuration NC replica also
s4-prefixmap: Use WERR_NOT_FOUND when OID is not found in current prefixMap
s4-prefixMap: split dsdb_schema_make_attid() function into read-only and
s4-pfm_test: Tests for dsdb_schema_pfm_attid_from_oid()
s4-pfm_test: no need to test created prefixMap contents here - it already tested
s4-dsdb_syntax: *_OID_oid_ldb_to_drsuapi() functions should use
s4-pfm-test: Enrich and fix comment primary for testing data
s4-pfm_test: Use single instance of global testing data to test with
s4-schema_init: we should be able to resolve Syntax OIDs with prefixMap we have
s4-resolve_oids: Remove redundant check - resolve_oids_need_value() handle this
s4-drs_tests: drs_util_DsAttributeId_to_string() is not used anymore
idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID values
s4-druspia.idl: rename DRSUAPI_ATTID_NONE to DRSUAPI_ATTID_INVALID
s4-dsdb_schema: Use DRSUAPI_ATTID_INVALID instead of 0xFFFFFFFF magic value
s4-devel: Verify prefixMap is saved correctly in LDB on disk
s4-ldb_module.h: use LDB error code for ldb_error() macro rather than LDB_DEBUG_FATAL
s4-test: Initial implementation for Schema replication black box test
s4-attid: Uppercase ATTID type constants
s4-pydsdb.c: Fix small memory leak in py_samdb_set_domain_sid()
s4-pydsdb-py_dsdb_get_oid_from_attid(): Avoid potential memory leak
s4-pydsdb-py_samdb_ntds_objectGUID(): Avoid potential memory leak
s4-pydsdb: py_dsdb_load_partition_usn() - simplify error handling in
s4-pydsdb: py_dsdb_am_rodc() may call samdb_rodc() only once to get the job done :)
s4-pyldb: Handle internal errors in py_ldb_contains() properly
s4-test: repl_schema - Make sure LdbError and ERR_NO_SUCH_OBJECT are visible
s4-repl: dsdb_convert_object -> dsdb_origin_object_convert
s4-repl: dsdb_extended_replicated_objects_commit -> dsdb_replicated_objects_commit
s4-repl: dsdb_extended_replicated_objects_convert -> dsdb_replicated_objects_convert/
s4-dsdb_syntax: Add remote prefixMap member for dsdb_syntax conversions
s4-dsdb_syntax: Use remote prefixMap to handle generic cases in drsuapi_to_ldb conversions
s4-prefixMap: dsdb_schema_pfm_oid_from_attid() to use const prefixMap
s4-dsdb_syntax: Warning message that we can't find requested ATTID in Schema Cache
s4-repl: Propagate remote prefixMap in DRSUAPI data conversion functions
s4-tests: Make repl_schema.py test part of Samba4 test suite
s4-schema_load: Don't clean in_transaction flag until transaction is really finished
s4-pyldb: Fix wrong type of 'self' parameter
s4-pyldb: Move PyLdbMessage_FromMessage() in PyMessage group of functions
s4-pyldb: Few miss-alignments aligned
s4-pyldb_util: Move ldb Type searching into separate function
s4-samdb.py: Use ldb.get_default_basedn() to avoid RootDSE search
s4-pyldb: Move code to create a ldb_message from a Python Dictionary object into a separate function
s4-pyldb: ldb.Message.from_dict class method to create LdbMessage object from dictionary
s4-ldb.python: add test for ldb.Message.from_dict() method
s4-ldb.python: Use $SELFTEST_PREFIX/tmp as a temporary directory for testing
s4-pfm_verify: fix usage string
s4-samba.tests: Explicitly pass LoadParm() instance to system_session() function
s4-tests: Wrap connect_samdb() into a connect_samdb_ex() helper
s4-test/repl_schema: Remote global ldb connections
s4-pfm_verify: Explicitly pass LoadParm() instance to system_session() function
s4-tests: Make all DRS python tests to start with samba4.drs.* prefix
s4-test/repl_schema: Refactor the test a little bit to
s4-tests/bind.py: Use samba.tests.connect_samdb() instead of directly using SamDB class
s4-ranged_result.c: Fix memory context for ranged attributes handling
s4-repl: Let dsdb_replicated_objects_convert() to accept schema from caller
s4-dsdb/prefixMap: Add prefixMap shallow copy function
s4-dsdb/schema: Add Schema shallow copy function
s4-dsdb/schema: Implement multi-pass working schema creation function
s4-dreplsrv: Use working_schema when replicating from Schema NC
s4-dsdb/syntax: Implement Remote-ATTID to Local-ATTID mapping function
s4-dsdb/syntax: Map remote ATTIDs for Attribute OID syntax
s4-test/schema: Extend the test to replicate a Class with Attribute with "mayContain" relation
s4-dsdb/descriptor: comment typo
s4-test/repl_schema: Test classSchema and attributeSchema replication in separate tests
s4-test/repl_schema: Make ERR_NO_SUCH_OBJECT visible to us
s4-test/delete_object: Remove unused imports
s4-test/fsmo: Remove unused imports
s4-dsdb_syntax: Be a little bit more chatty when we can't an ATTID in our cache
s4-test/repl_schema: Test class inheritance through subClassOf
s4-dsdb/syntax: Map remote ATTIDs for Class OID syntax
s4-schema_load: Strip a pointless check
s4-repl_meta_data: Remove duplicated check
s4-linked_attributes: Give more info where an error occured
s4-repl_meta_data: Print function name when we can't find attribute in Schema cache
s4-dsdb_schema: Seize using global_schema when referencing new schema for an LDB
s4-test/repl_schema: New test to test a classSchema with custom attribute
s4-test/repl_schema: use 'top' as default base class for our test classSchema objects
s4-schema_syntax: Use remote prefixMap to map remote ATTID to local one
s4-repl: Allow dsdb_replicated_objects_commit() to use different schema while committing objects
s4-drepl: User working schema for commiting objects when replicating Schema NC
s4-schema_syntax: We should use make_ATTID function when converting remote-ATTID to local one
s4-dsdb_schema: We need base_dn in Schema's shallow copy too
s4-drepl: We won't need a working schema for empty replicas sent.
s4-schema_syntax: Log error message when _dsdb_syntax_OID_oid_drsuapi_to_ldb() fails
s4-dsdb_schema: Handle remote ATTIDs based on msDs-IntId value
s4-test/repl_schema: Make sure every object is with unique name
s4-test/repl_schema: remove unused and commented out code
s4-dsdb/tests/python: Explicitly pass comamnd line LoadParm() instance to system_session()
s4-drepl: Fix log message to be shown on its own line
s4-drepl: Reference current Schema cache into working_schema context
s4-drepl: Make refreshed schema a global one
s4-devel/pfm_verify: Extend the tool to verify schemaInfo attribute value
s4-dsdb_schema: Copy info needed for Schema refresh in dsdb_schema_copy_shallow
s4-drepl: During Schema replication, we need to save updated prefixMap if everything is OK
s4-pydsdb: Use local memory context in py_dsdb_get_oid_from_attid()
s4-devel/pfm_verify: Move schemaInfo getter into separate function
Ken Harris (1):
CREATE in a compound CREATE/NOTIFY sequence was being passed through set_operation_credits()
Kirill Smelkov (9):
pytdb: Add support for tdb_add_flags() & tdb_remove_flags()
pytdb: Fix repr segfault for internal db
pytdb: Update open flags to match those for tdb_open() in tdb.h
pytdb: Add support for tdb_enable_seqnum, tdb_get_seqnum and tdb_increment_seqnum_nonblock
pytdb: Add support for tdb_transaction_prepare_commit()
pytdb: Add support for tdb_freelist_size()
pytdb: Add TDB_INCOMPATIBLE_HASH open flag
pytdb: Add support for tdb_repack()
pytdb: Check errors after PyObject_New() calls
Lukasz Zalewski (1):
Addition of userPrincipalName attribute when new account is created
Martin Schwenke (1):
cluster_fatal() exit code should not indicate success.
Matthias Dieter Wallnöfer (451):
s4:libcli/resolve/file.c - fix "const" warning
s4:rpc_server/dcerpc_server.c - fix a "const" warning
s4:drepl_out_helpers.c - fix a counter type
s4:extended_dn_in LDB module - fix a counter type
s4:rootdse LDB module - fix counter types
ldb:ldb_msg_add_linearized_dn - handle NULL DNs
ldb:ldb_match.c - fix counter variable type
s4:password_hash LDB module - don't assign "lp_ctx" twice
s4:rootdse LDB module - fix comment typo
s4:rootdse LDB module - make more use of LDB result constants
s4:python/samba/join.py - use constant for DC function level
s4:python/samba/join.py - add a comment to point out that NCs have to be assigned dynamically
libds:flag_mapping.c - support also the default read-only DC primary group
s4:ldap.py - enhance SAM user/groups behaviour test regarding default primary groups
s4:samldb LDB module - support the "userAccountControl" -> "primaryGroupID" detection also on modify operations
s4:ldap.py - test default primary groups on modify operations
s4:dsdb/common/util_samr.c - remove the primary group specifications
s4:samldb LDB module - it isn't allowed to create user/computer accounts with a primary group specified
s4:provision.py - make more use of "names.serverdn" on NTDS settings location
s4:provision.py - support still not fully provisioned trees regarding the rootDSE module
s4:torture/rpc/netlogon.c - remove the dependency on "samdb_server_site_name"
s4:rootdse LDB module - better that the "edn" control handling is done last
s4:rootdse LDB module - remove "priv" checks where not needed
s4:rootdse LDB module - make "serverName" dynamic
s4:provision - rootdse - remove the static attribute "serverName"
s4:rootdse LDB module - introduce dynamic "dnsHostName" attribute
s4:provision - rootdse - remove static "dnsHostName" attribute
s4:rootdse LDB module - introduce dynamic "ldapServiceName"
s4:provision - rootdse - remove static "ldapServiceName" attribute
s4:ldap.py - add tests for the "dsServiceName", "serverName", "dnsHostName" and "ldapServiceName" rootDSE attributes
s4:rootdse LDB module - make use of "dsdb_forest_functional_level"
s4:lazy_commit LDB module - the "show_deleted" control is initialised by the "show_deleted" LDB module
s4:repl_meta_data - also on delete operations the new RDN attribute has to be casefolded correctly
s4:libcli/resolve/dns_ex.c - fix "const" warning
s4:schema_samba4.ldif - update allocated controls list
s4:getncchanges.c - fix some counter types
s4:acl_read LDB module - fix counter type
s4:ldap.py - fix "system only" test
s4:ldap.py - delete the right object after test completition
s4:dsdb_dn_val_rmd_flags - memmem - scan the whole string for occourences
s4:objectclass LDB module - fix the delete behaviour of server containers
s4:objectclass LDB module - fix the "crossRef" delete protection
s4:subtree_delete LDB module - it is only responsible for non-deleted objects
s4:repl_meta_data LDB module - consider the SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE flag
s4:show_deleted LDB module - also support the "show_recycled" control
s4:subtree_rename LDB module - also already deleted objects have to be renamed
s4:dsdb/common/util.c - introduce "DSDB_SEARCH_SHOW_RECYCLED" flag
s4:dsdb - substitute the "show_deleted" with the "show_recycled" control
s4:dsdb python stuff - introduce also here the "show_recycled" control
s4:ldap.py - remove the delete tests
s4:deletetest.py - enhance the tests
s4:patchfile_dotreg.c - use "size_t" when counting characters in DATA_BLOBs
s4:urgent_replication.py - fix up the system flags handling
s4:objectclass LDB module - introduce allowed system flags restriction
s4:ldap.py - test allowed system flags restriction
s4:kdc/db-glue.c - remove unused variable
s4:dsdb/common/util.c - change the usage of the RECYCLED control
s4:ldb_modules.c - fix a typo
s4:kdc - use "userAccountControl" always unsigned
s4:samldb LDB module - assign better memory contexts on two places
s4:samldb LDB module - simplify/unify the message handling on add and modify operations
s4:setup/provision_rootdse_add.ldif - provide informations in the right order
s4:subtree_delete LDB module - remove the DN from an error message
s4:samldb LDB module - remove "type" parameter of "samldb_fill_object"
s4:dsdb/common/util.c - provide message set functions for integer types
s4:dsdb/common/util_samr.c - use an LDB constant for result checking
s4:ldap.py - split it up and move SAM related stuff to sam.py
ldb:ldb_match.c - fix a counter type
s4:samldb LDB module - first implementation of the samldb objectclass trigger
s4:samldb LDB module - use the new "objectclass_trigger" for add operations
s4:samldb LDB module - first implementation of the samldb primary group trigger
s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations
s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
s4:ldap.py - test the "isCriticalSystemObject" behaviour
s4:samldb LDB module - support the group type changing properly
s4:sam.py - add a test for the group type changing behaviour
s4:samldb LDB module - proof the account type also on LDB modify operations
s4:samldb LDB module - deny creation of temporary duplicate accounts
s4:sam.py - tests for "userAccountControl" attribute
s4:samldb LDB module - cosmetic fixups
s4:samldb LDB module - attempt to fix integer handling on big-endian platforms
s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", "samdb_result_uint64" and "samdb_result_string"
s4:dsdb - remove "samdb_msg_add_value"
s4:libds/common/flags.h - fix typo
s4:dsdb/common/util.c - samdb_msg_add_string - the attribute name doesn't need to be duplicated
s4:dsdb/common/util.c - samdb_msg_add_* calls - proof for more OOM conditions
s4:samdb_create_foreign_security_principal - proof error code of "samdb_msg_add_string"
s4:samldb LDB module - cosmetic - use "ldb" variable rather than "ldb_module_get_ctx"
s4:lsa RPC server - use LDB result constant
s4:libnet_samsync_ldb.c - use LDB result constants
s4:ntptr/ntptr_simple_ldb.c - use LDB result constants
s4:lib/registry/util.c - strtoll call - better say explicitly that data is in hex format
s4:lib/registry/util.c - cosmetic - fix indentation, trailing whitespaces
s4:samdb_msg_add_int* - use "ldb_msg_add_string" rather than "samdb_msg_add_string"
s4:torture/local/dbspeed.c - use LDB result constant
s4:dsdb/common/util.c - describe the behaviour of the functions "samdb_msg_add_uint", "samdb_msg_add_uint64" and "samdb_msg_set_uint" a bit more
s4:dsdb - fix unsigned integer save problems using the "%u" specifier
s4:ldif_handlers.c - fix a typo
s4:objectclass LDB module - implement the "isCriticalSystemObject" subtree delete protection
s4:samba3sid LDB module - handle the RID as uint32_t
s4:dsdb/samdb/ldb_modules/util.c - remove now unused functions which set integers
s4:samldb LDB module - use appropriate fixed-length integer types where needed
ldb:"ldb_dn_canonical" - use an "unsigned int" counter
ldb:"ldb_dn_remove_base_components" - use an "unsigned int" counter
ldb:"ldb_dn_add_child" - use "unsigned int" counters
ldb:"ldb_dn_compare_base" - use "unsigned int" counters
ldb:pyldb.c - remove pointless comment
ldb:ldb.h - reorder controls/extended operations
s4:libcli/ldap/ldap_controls.c - fix up the controls list
s4:dsdb - make the RELAX control private
s4:"wrap_casefold" - move it to "ldb_wrap.c" since it's only used there
s4:ldb-samba/ldb_wrap.c - fix indentation and trailing whitespaces
s4:lib/util/util_ldb.c - remove unused "gendb_add_ldif" call
s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c"
Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls in "dsdb/common/util.c""
s4:"util_ldb" - remove some really unused dependancies
ldb:ldb_tdb.c - improve the error outputs
ldb:ldb_tdb.c - fix up counter variables
ldb:"ldb_schema_attribute_by_name_internal" - switch back to 32bit counters
ldb: always return PROTOCOL_ERROR if an operation is unsupported
s4:ldap_server - use error code constant
s4:samdb.py - use a more standard way to get to the domain realm/dns name
s4:samdb.py - remove a pointless comment
s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"
ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int range
s4:nbt_server - fix a LDB counter type
libcli/security/access_check.c - fix a memory leak
ldb:ldb_pack.c - remove superflous "message->elements = NULL"
ldb:ldb_tdb submodule - use "ldb_msg_new" where appropriate
ldb:ldb_cache.c - fix memory contexts and memory leaks
ldb:ldb_index.c - let "ldb_module_oom" generate the return code
ldb:ldb_index.c - fix some memory leaks
s4:lib/util/charset/iconv.c - remove a distinction which can never happen
ldb:ldb_tdb/ldb_cache.c - in this function we don't use LDB return codes
ldb:ldb_tdb/ldb_cache.c - remove a superflous "talloc_free"
ldb:ldb_modules.c - if we don't find the associated dynamic object then please close the handle
ldb:ldb_modules.c - "dlclose" could cause inference on "dlerror"
tdb: commit the version 1.2.7 signatures
s4:dns_server - fix counter types
ldb:rename LDB_CONTROL_BYPASSOPERATIONAL_OID into LDB_CONTROL_BYPASS_OPERATIONAL_OID
s4/ldb:introduce the LDB_CONTROL_PROVISION_OID control
ldb:ldb.h - include a comment that the relax control is mainly used by the OpenLDAP backend
s4:schema.py - reformat and fix the security descriptor
s4:provision.py - add the correct "CN=Sites" security descriptor
create_descriptor.c - fix comment
s4:dsdb - use the more safe "samdb_msg_add_(u)int*" calls always where possible
s4:dsdb - use LDB results in "add_time_element" and "add_uint64_element"
s4:dsdb - remove some calls of "samdb_msg_add_string" when we have talloc'ed strings
s4:samldb LDB module - assign better memory contexts in some cases
s4:samldb LDB module - use "uint32_t" for available krbtgt number
s4:samldb LDB module - fix indentations
s4:provision_*_references.ldif - "add" and do not "replace" the "wellKnownObjects"
s4:objectclass_attrs LDB module - deny multi-valued replace requests
s4:ldap.py - prove the denied multi-valued replace requests
s4:samldb LDB module - other indentation fixes on error messages
ldb:gendb_* calls: support a "NULL" resultset parameter
s4:"samdb_search_count" - introduce a "mem_ctx" parameter
s4:samr RPC server - remove a somewhat pointless comment
s4:samr RPC server - "dcesrv_samr_info_DomGeneralInformation" - count always all type of groups
s4:objectclass_attrs.c - rework to support these special "description" constraints
s4:ldap.py - enhance and activate the "description" attribute test
s4:samldb LDB module - enhance the "member"-check trigger
s4:sam.py - enhance users and groups test
s4:ldap.py - add a test for attribute ranges - still very basic
librpc/ndr/ndr.c - fix some counter types
s4:setup/schema_samba4.ldif - this control isn't used anymore
s4:samr RPC server - remove wrong implementation of ReplicaSourceNodeName
s4:samr RPC server - provide the right "ReplicaSourceNodeName"
s4:samr RPC server - DomainGeneralInformation - never return NULL on the oem name
s4:samr RPC server - fix indentation of function parameters
s4:samr RPC server - fix trailing whitespaces
s4:torture/rpc/samr.c - test the "ReplicaSourceNodeName" only against s3
s4:torture/rpc/samr.c - fix NTTIME warnings by casts
s4:extended_dn_store LDB module - fix counter types
s4:partition_init LDB module - fix counter type
s4:resolve_oids LDB module - fix counter types
s4:local_password LDB module - fix typos
s4:rpc_server/common.h - quiet compilation warnings
s4:samldb LDB module - "member" trigger
s4:sam.py - enhance "member" tests
s4:samr RPC server - the LDB error codes for adding or deleting a group member have changed
s4:samldb LDB module - adapt the "samldb_prim_group_change" trigger to support multiple "primaryGroupID" modification entries
s4:sam.py - add a short double swap "primaryGroupID" test
s4:samldb LDB module - primary group change - free temporary messages to save memory
s4:samldb LDB module - add a new function which handles special cases for single-valued attribute on SAM modifications
s4:samldb LDB module - make the "userAccountControl" and "groupType" modify handlers separate functions
s4:drsuapi RPC server - fix counter variables
s4:samldb LDB module - check for the number of results after a search operation
s4:samldb LDB module - implement the "dNSHostName" - "servicePrincipalName" change trigger
s4:sam.py - add a test for the "dNSHostName" - "servicePrincipalName" update mechanism
s4:netlogon RPC server - point out that the "LogonGetDomainInfo" "servicePrincipalName" generation is still needed
s4:dsdb/dns/dns_update.c - increase the timeout for the SPN and DNS update scripts
s4:scripting/bin/samba_spnupdate - also support adding all possible "servicePrincipalName"s
s4:setup/spn_update_list - reorder and update with other SPNs
s4:provision - remove the "servicePrincipalName" creation on the DC object
s4:libnet_join.c - only write the really essential SPNs
s4:netlogon RPC server - "LogonGetDomainInfo" - always check the LDB return codes
s4:samldb LDB module - validate "sAMAccountName" modifications
s4:sam.py - test the "sAMAccountName" attribute
ldb:tools/ldbtest.c - fix build warning
s4:torture - suppress printf "%llu" on uint64_t variables warnings
s4:provision - adapt the "provision" so that SIDs are only set on entry creation
s4:samldb LDB module - deny "objectSid" modifications
s4:samldb LDB module - unify objectSid assignment error messages
s4:sam.py - test "objectSid" modification lockdown
s4:ldap.py/sam.py - simplify the objectclass specifications
s4:setup/spn_update_list - the DNS SPN is only used in DNS mode
s4:samldb LDB module - "sAMAccountName" checker
s4:samldb LDB module - support now the full "servicePrincipalName" update trigger
s4:sam.py - additional testing for "servicePrincipalName" updates
s4:samldb LDB module - the "sAMAccountName" cannot be substituted by nothing
s4:RPC server - cosmetic fixes - indentation, comments
s4:RPC server - always set the response pad data in base of the request one
s4:objectguid LDB module - remove "objectguid_find_attribute"
s4:objectclass_attrs LDB module - simplify the invoke of the "dSHeuristics" checker
s4:objectclass_attrs LDB module - refactor the "dSHeuristics" checker
s4:objectclass LDB module - the structural objectclass has always to be specified
s4:objectclass_attrs LDB module - introduce the hardcoded delete-protected attributes list
s4:samldb LDB module - improve the "get_single_valued_attr" call and move it into "ldb_modules/util.c"
s4:sam.py - assign valid values when performing the special-attributes constraint checks
s4:descriptor LDB module - a bit cleanup
s4:ldap.py/passwords.py - just use objectclass "user" for users
ldb:ldb.h - reorder extended operations list
s4:password_hash LDB module - fix indentation
s4:samr RPC server - "dcesrv_samr_RemoveMemberFromForeignDomain"
ldb:ldb_tdb.c - make "ltdb_add" more similar to "ltdb_modify"
ldb:ldb_tdb.c - ltdb_check_special_dn - fix indentation
s4:operational LDB module - "canonicalName" doesn't make use of the "distinguishedName" attribute
s4:update_keytab LDB module - we don't need to search for the "distinguishedName" attribute
s4:ldap.py - enhance the "distinguishedName" tests
ldb:ldb_parse.c - "ldb_parse_hex2char" - always initialise "c"
s4:descriptor LDB module - don't ignore referrals if we are executing an ordinary external search operation
s4:descriptor LDB module - remove a "ldb_msg_sanity_check" call
s4:descriptor LDB module - remove a bit pointless memory context
s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the default operation callback implementations
s4:descriptor LDB module - save a pointer to the request message on the temporary "ac" context
s4:torture/dssync.c - remove unused variable
ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only the "distinguishedName" one
s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the attribute fetch also on LDB add operations
s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully behave as in AD
s4:upgradeprovision - remove some "recalculate_sd" uses
s4:objectguid LDB module - objectGUIDs cannot be specified on add operations
s4:objectguid LDB module - fix typo in output message
s4:ldap.py - add more "objectGUID" related tests
s4:drsuapi RPC server - writespn.c - fix indentations
s4:objectguid LDB module - make use of "dsdb_next_callback"
s4:objectclass LDB module - no idea why we'd need the "objectGUID" here
s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updates
s4:pydsdb.c - introduce Python 2.4 compatibility defines
s4:pydsdb.c - use "Py_ssize_t" for Python list counters
ldb:pyldb.c - fix indentation
ldb:pyldb.c - use "Py_ssize_t" for counting list entries
ldb:pyldb.c - fix some "Py_ssize_t" output warnings
ldb:pyldb.c - most of the times "time_t" is defined as "long int"
ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" error
ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned int" for the element reference
s4:passwords.py - add another two failure cases
s4:acl LDB module - define the delete passwords special case a bit better
s4:password_hash LDB module - clear the fact that a delete of password attributes isn't possible
s4:samdb_msg_find_old_and_new_ldb_val - rework
s4:password_hash LDB module - deleting password attributes is a little more complicated
s4:passwords.py - test empty password attributes behaviour
s4:pyldb.c - fix "py_ldb_contains" according to the comment by Jelmer
s4:password_hash LDB module - introduce a "userPassword" flag which enables/disables the two "userPassword" behaviours
s4:provision - switch to "clearTextPassword" for setting passwords
s4:provision.py - strip trailing whitespaces
s4:provision_self_join.ldif - the object SID in AD is called "objectSid"
s4:python tests - fix script names in the help text
s4:speedtest.py - make it executable
s4:speedtest.py - fix script name in the help text
s4:speedtest.py - remove duplicated code
s4:speedtest.py - use "unicodePwd" for setting user's password
s4:upgradehelpers.py - use "clearTextPassword" rather than "userPassword"
s4:acl.py - two password change tests are expected to fails on Windows 2000 function level
s4:selftest/tests.py - skip the "passwords.py" suite on Windows 2000 domain function level
s4:ldb_modules/util.c - "dsHeuristics" -> "dSHeuristics"
s4:local_password LDB module - remove schema checking code and fix some typos
s4:libnet/libnet_samsync_ldb.c - remove "userPassword" remove code
s4:password_hash LDB module - move "samdb_msg_find_old_and_new_ldb_val" into the password_hash LDB module
s4:password_hash and acl LDB modules - handle the "userPassword" attribute according to the "dSHeuristics"
s4:passwords.py - add a test for the normal "userPassword" behaviour
s4:objectclass LDB module - allow RDNs also to come from superclasses
s4:dsdb - proof against empty RDN values where expected
ldb:ldb_ldap.c rename operation - check for the RDN name and value
s4:pytevent.c - fix a discard const warning
s4:samldb/objectclass_attrs LDB modules - move "description" logic from "objectclass_attrs" into "samldb"
s4:repl_meta_data LDB module - convert two debug messages into error messages
s4:objectclass LDB module - we should not simply ignore additional "objectClass" attribute changes
s4:objectclass LDB module - multiple "objectClass" change elements are unfortunately still allowed
s4:upgradeprovision - why not directly use "provision:0"?
s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password conversion errors
s4:objectclass LDB module - implement the "objectClass" change restrictions on Windows 2000 forest function level
s4:objectclass LDB module - improve the default name context checking on modifications
s4:torture/basic/base.c - fix output warnings regarding "time_t"
s4:heimdal - fix the return code of a non-void function
s4:objectclass LDB module - free "nc_root" after name context comparisons
s4:subtree_rename LDB module - make use of "dsdb_find_nc_root"
s4:objectclass LDB module - the "olddn" is the special DN for rename requests
s4:descriptor LDB module - make more clear that special control entries never should be handled by modules
s4:"dsdb_find_nc_root" - let it work also when the "namingContexts" attribute isn't available yet
s4:descriptor LDB module - handle the NCs in a more generic way by using "dsdb_find_nc_root"
s4:descriptor LDB module - also "get_default_ag" should make use of "dsdb_find_nc_root"
s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the NC-specific checks
ldb:ldb_dn.c - ldb_dn_explode - free also the extended components on error cases
ldb:ldb_dn_explode - point out that on error cases "data" is implicitly free'd
s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests
s4:repl_meta_data LDB module - allow also special DNs to be renamed correctly
s4:password_hash LDB module - remove unused headers
ldb:skel.c - don't introduce trailing whitespaces by a module template
s4:dsdb python tests - use "ldb.domain_dn"
Revert "s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests"
s4:dsdb tests - use even more already defined pyldb functions to retrieve NCs
s4:torture/ldb/ldb.c - add a small test for a DN with an escaped comma
s4:netlogon/LogonGetDomainInfo - handle a NULL "dns_hostname"
ldb:ldb_rename on ldap backends - handle the case when the RDN value is empty
ldb:rdn_name LDB module - add more RDN name constraints
s4:acl LDB module - it's more correct to count the password attributes using "unsigned int"
s4:samldb LDB module - objectclass trigger - reorder template attributes
s4:objectclass_attrs LDB module - add more delete protected attributes
s4:repl_meta_data LDB module - move the "objectGUID" checks a bit higher
s4:repl_meta_data LDB module - fix a counter type
waf:lib/util - add missing dependency on talloc
s4:provision_rootdse_add.ldif - add all possible LDAP policy values but outcommented for the moment
s4:objectclass LDB module - some more or less cosmetic return value macro changes
s4:objectclass LDB module - move one checks into the "objectclass derivation loop"
s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified
s4:lsa RPC server / objectclass LDB module - fix the creation of trusted domain objects
s4:objectclass LDB module - move the "mem_ctx" allocation to a better place
s4:objectclass LDB module - simply use "msg" when requesting the message
s4:rootdse LDB module - remove unused variable
s4:torture/drs/python/fsmo.py - fix comments and an error message
s4:dsdb/tests/python/sam.py - we don't need the domain SID
s4:dsdb tests - make use of "ldb.get_domain_sid()"
s4:samba3sam LDB module - make the "pw_uid"/"pw_gid" conversion a bit clearer
s4:samba3sam LDB module - correctly print out an unsigned value
s4:role transfer - use always type "enum drepl_role_master" for role specifications
tdb:tdbstore.c - remove an useless '\'
MAINTAINERS.txt - fix typo
s4:dsdb/samdb/samdb.h - fix include ordering in order to prevent warnings on Tru64
s4:libcli/security/session.h - fix include ordering for "enum security_user_level"
Revert "s4:rpc_server/common/common.h - introduce two forward declarations to suppress parameter declaration warnings"
s4:wkssvc RPC server - better solution for srvsvc* enum's in server_info.c
s4:param/secrets.h - fix "enum netr_SchannelType" include correctly
s4:drsuapi RPC server - fix "enum security_user_level" warning on Tru64
s4:torture/rpc/samsync.c - remove uninitialised "nt_status" check
s4:torture/rpc/samr.c - fix uninitialised "status" variables
s4:lib/registry/rpc.c - remove a duplicate assignment
s4:dsdb/repl/drepl_out_helpers.c - print out the correct error message (werr)
s4:drepl_service.c - fix error macro (use "_werr" and not "werr")
s4:dsdb/repl/drepl_service.c - return the correct WERR result
tdb:common/open.c - use "discard_const_p" for certain "tdb->name" assignments
s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object
s4:dsdb/repl/drepl* - move "lib/messaging/irpc.h" include into "drepl_service.h"
replace:wscript - change the "bool" checks to be compatible with more platforms
Revert "s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object"
replace:wscript - reintroduce the size check for "bool" due to a request of metze
replace:wscript - change the "bool" checks to be compatible with more platforms
replace:wscript - reintroduce the size check for "bool" due to a request of metze
s4:introduce casts before outputs of "time_t" variables
s4:torture/smb2/acls.c - remove two unused variables
s4:auth/gensec/gensec_gssapi.c - always print error messages on the same talloc context
s4:param/pyparam_util.c - remove unused include
heimdal:base/heimbase.c - remove an unused variable
s4:auth/ntlmssp/ntlmssp_server.c - remove unnecessary ";"
s4:torture - remove unreachable statements to quiet warnings of Solaris "cc"
libcli/security/object_tree.c - remove unreachable statement
s4:dns_server/dns_update.c - remove unreachable statements
s4:dcesrv_drsuapi RPC server - remove unreachable statement
s4:wrepl_server - remove unreachable statement
s4:auth/gensec/gensec_tstream.c - quiet warnings on Solaris "cc"
s4:lib/tls/tls_tstream.c - quiet warning on Solaris "cc" by casts
s4:wrepl_server - add a cast on "iov_base"
s4:torture - prefer the termination "return"s at the end of two unittests
s4:torture - partially revert "s4:torture - prefer the termination "return"s at the end of two unittests"
s4:ranged results LDB module - "rr_search_callback" - change some memory context
s4:ranged results LDB module - cosmetic - fix some indentation
ldb:ldb_msg_add_value - fix here a wrong memory context
s4:dsdb/common/util.c - "samdb_msg_add_add/delval" - introduce also here the better memory context
s4:dsdb/repl/replicated_objects.c - proof if "talloc_reference" doesn't return NULL
s4:password_hash LDB module - allow empty ("") passwords
s4:dsdb/samdb/cracknames.c - fix various KRB5 memory leaks
s4:auth/sam.c-"authsam_expand_nested_groups" - don't fail if we've memberships on non-SAM objects
s4:auth/sam.c - specify the SID ignore case better
s4:auth/sam.c - fix the free of memory contexts
s4:auth/sam.c - the check for the SAMDB needs to be on the top of the call
s4:auth/sam.c - when printing out a string buffer we don't strictly need the width
s4:libnet_JoinADSDomain - move away from "samdb_msg_add_string"
s4:libnet/libnet_samsync_ldb,c - move away from "samdb_msg_add_string" when possible
s4:lsa RPC server - "dcesrv_lsa_CreateSecret" - a bit of rework
s4:lsa RPC server - always initialise "info" structures
s3/s4:lsa.idl - QueryDomainInformationPolicy - the "unknown6" field is called "reserved"
s4/kdc - fix a warning regarding a changed parameter type (kvno)
s4:torture/rpc/samr.c - fix output message
s4:dsdb/common/util_samr.c - "dsdb_enum_group_mem" - fix it up regarding non SAM members
s4:samr RPC server - dcesrv_samr_GetBootKeyInformation - return NOT_SUPPORTED
s4:dsdb/common/util_samr.c and auth/sam.c - fix error message
s4:auth/kerberos/kerberos_pac.c - fix another memory leak regarding the KRB principal
s4:auth/gensec/gensec_krb5.c - remove a pointless "nt_status" test
s4:auth/gensec/gensec_krb5.c - fix/reorder memory free operations
s4:kdc/kpasswdd.c - fix memory leaks
s4:dsdb/samdb/cracknames.c - fix another memory leak
s4:lib/messaging/*.h - fix compile warnings on gcc 3.4
s4:dsdb/samdb/ldb_modules/util.h - fix a gcc 3.4 compile warning
s4:cluster/cluster.h - fix another gcc 3.4 "struct" warning
lib/util:tests/time.c - "test_timestring" - fix it on Solaris
s4:fix some shadowed declaration warnings on Solaris by renaming the symbols
s4:client/client.c - fix Solaris warning by a type cast
s4:torture/locktest.c - fix one indentation
s4:torture/locktest.c - fix "pid_t" printf warning on Solaris
lib/util/fault.c - fix "pid_t" printf warning on Solaris
Revert "lib/util:tests/time.c - "test_timestring" - fix it on Solaris"
s4:acl_read LDB module - fix attributes list
s4:libnet_samsync_ldb.c - introduce an error message on failed domain synchronisation
s4:libnet_samsync_ldb.c - simplify a talloc steal call
s4:kdc/kpasswdd.c - don't return an uninitialised NT_STATUS
s4:param/loadparm.c - fix a warning by introducing a "const" cast
s4:kdc/proxy.c - optimise includes in order to fix a build warning on Tru64
s4:smbd/process*.c - fix PID warnings on Solaris
s4:kdc/*.c - minimise includes
s4:web_server/wsgi.c - add missing Python compatibility code
s4:web_server/wsgi.c - fix a counter type
s4:web_server/*.c - optimise includes
ldb:pyldb - optimise includes
s4:dsdb/pydsdb.c - clean up memory handling
s4:lib/ldb-samba/pyldb.c - optimise includes
s4:dsdb/pydsdb.c and web_server/wsgi.c - remove accidentally introduced Py_RETURN_NONE
s4:libnet/py_net.c - add checks for OOM conditions
s4:libcli/finddcs_nbt.c - optimise headers
s4:libcli/finddc.h - fix header dependancies
s4:param/provision.c - optimise includes
s4:scripting/python/pyglue.c - optimise includes
s4:scripting/python/pyglue.c - add a OOM handling
ldb:pyldb.h - revert to the previous header behaviour
s4:dsdb/pydsdb.c - don't throw another exception on "PyObject_AsDn"
s4:auth/gensec/spnego.c - remove unused variable "principal"
s4:dsdb/common/util.c - remove unused variable "ndr_err"
lib/util/asn1.c - remove the "const" specifier from OID
librpc/ndr/ndr_*.c - remove "const" from OIDs
s3/s4:auth SPNEGO - adaptions for the removed "const" from OIDs
s4:lib/ldb-samba/ldif_handlers.c - adaption needed for removed "const" on OIDs
s4:dsdb/schema/schema_* - adaptions needed for removed "const" on OIDs
s4:auth/session.h - use a forward declaration for type "struct ldb_context"
ldb:tools/ldbdel.c - "replace.h" should be the first include
ldb:pyldb.c - remove unused variable
lib/util/time.c - make the "strftime" output locale independant ("%c" is not)
dsdb:ldap.py - transform a test call into the new "msg.add" syntax
lib/replace/testsuite.c - fix test output
s4:torture/ndr/spoolss.c - add a "ULL" suffix for a 64 bit unsigned integer literal
s4:acl LDB module - add a missing "talloc_free(tmp_ctx)" in an error path
s4:acl LDB module - "acl_rename" - memory contexts fixup
Matthieu Patou (101):
upgradeprovision: use the same case for hostname in reference provision as in the current provision
s4 provision: Make GPO folder group writable
s4 upgradeprovision: Copy versionNumber if not present it helps to make gpo valid
s4 upgradeprovision: fix a bug with empty reference objects
s4 provision: start with gpo of version 0 and be consistent between different policies
upgradeprovision: fix a bug with not updated links
upgradeprovision: Fix a bug with renamed entries
upgradeprovision: fix a typo
s4:heimdal: import lorikeet-heimdal-201009250123 (commit 42cabfb5b683dbcb97d583c397b897507689e382)
heimdal: change the version string
pyldb: test return code before trying to talloc_steal
unittests: makes the unit tests for ldb.python back in order
unittests: add a test to avoid regression on previous fix
ndr: Handle the case of string array with all null terminated strings
idl: dfsblobs fix glitches in the implementation
dfs: Fix wrong size of referral, change order of dc referral
torture: complete dfs referral tests
build: make make tests SCREEN=1 work on freebsd
torture: Add debug on what we are removing
unit tests: do some cleanup after tests
s4 rpc_server: fix a build error on freebsd
s4 dsdb: fix sign problem on PPC and x86
s4 param: change messaging directory name from messaging to msg
selftest: correct the import of Time::HighRes
selftest: use full path for selftest.pl instead of relative paths
replace: use a wrapper around strtoll if it didn't behave as expected
replace: use replace for non 'samba' compliant strptime
waf: Mark the replacement zlib private so that it can build on machine without a system zlib
replace: restore the order for #define + rep_strtoll
Add a script for formating test result of st/subunit
unit tests: remove smb2.dir
unit tests: move backend testing to the end
tls: Inform the user if the cert/ca/private key can't be saved
build: remove warnings about redifinition of boolean use -KPIC on suncc
build: Add XPG6 otherwise we have a configure pb on sun Solaris
unit tests: use skip file to exclude smb2.dir instead of hack
build: add the -fno-common flags to fix the link pb on mac os X
build: set shared libraries flags correctly on mac os X
build: strip -single_module when doing bundle on mac OS X
provision: when deriving netbiosname from hostname force the netbiosname to be compliant
build: make this test darwin only as it mess a bit more the freebsd build
build: Remove zlib from the cache if we failed to pass all the tests
provision: fix wrong tests
build: check that if we provide -liconv we can build shared libs
build: In some case the flags for the sun studio linker are wrong
unit tests: allow make test to correctly and quickly exit in case of problem while provisionning a test environment
unit tests: remove trailling white spaces
fix in_screen so that it works on os that don't chdir to $PWD
Add a script to make backup of samba provision
Update WHATSNEW4 to add information related to samba_backup
samldb: relax groupType modification checks
upgradeprovision: update revision for forestupdate and domainupdate objects
upgradeprovision: use the (upgrade)provision control also
upgradeprovision: use the relax/(upgrade)provision when modifying object
upgradeprovision: fix pb with dns-hostname, regenerate a correct keytab
upgradeprovision: use relaxed control while adding missing object container
unit tests: add testing for dns account password change
Fix typo
python: use the ldbMessage + modify notation instead of modify_ldif that we try to avoid
ktpass: fix the search path for when running in samba's source dir
ktpass: also use userPrincipalName for locating the principal
selftest: fix tap2subunit detection on system with tap2subunit but not correct subunit libs
Make log level of the server configurable in make test
ldb-tdb: Add more information about full scan
Fix endianess problems as discovered on the build farm
Add timestamp when running with --maximum-runtime
remove useless debug message :-)
build: change compile flags on mac os x if we face pb with common symbols
add handling for solaris
fix bad shell
build: update gdb_backtrace to make it search for gdb66 as it work on freebsd
tls_tstream: increase the buffer size
build: fix hpux build pb
build: tru64 needs -shared for building libs
smbtorture: use xxxULL notation instead of INT64_C(xxx)
build: Cope with broken libiconv
build: do not duplicate the checks for python in samba4
build: finishing fixing broken libiconv on hpux
build: introduce SAMBA_CHECK_PYTHON_HEADERS
build: use CPP and CC values when calling pidl
pidl: use $CC -E if $CPP is not defined, if both undefined use cpp
build: detect if conf.env['CPP'] is an array or not
build: reset cpp on host with xlr_c and let pidl use $CC -E
build: compiler on aix is xlc_r not xlr_c
build: add a function to test if -lc is needed
build: cpp is prefixed by CPP=
heimdal: unset SLIST_ENTRY only if we are with windows
build: On AIX we need _XOPEN_SOURCE >= 500 for CLOCK_REALTIME
build: add a dependency on lib iconv for lib intl if we are not able to find it
build: add more CFLAGS for aix
replace: add comments to make the #ifdef/#else/endif more readable
build: add a check for _ss_family as it used on aix to replace ss_family
build: change lib order to fix build on netbsd
change searched name from _ss_family to __ss_family
build: move the import near the place where need it, so that we can build on hosts with python's zlib
build: remove -no-undefined and -as-needed on openbsd
build do not add -no-undefined on openbsd
wafsamba: change the default value for SAMBA_MODULE of pyembed to False
build: fix bad syntax
build: hpux didn't support -Bdynamic
build: openbsd plateform is openbsd4
Michael Adam (75):
s3:registry: move higher level function reg_open_path to new module reg_api_util
s3:registry: move (commented out) hilvl util functions to reg_api_util.c
s3:registry: move prototypes of unused hilvl functions to ret_api_util.h and comment them out
s3:services_db: untangle assignments from check in construct_service_sd().
s3:services_db: untanlge assignments from check in read_init_file().
s3:services_db: rewrite svcctl_set_secdesc() using reg_api calls instead of legacy
s3:services_db: rewrite svcctl_set_secdesc to use tmp talloc ctx
s3:services_db: fix a debug message
s3:services_db: remove the TALLOC_CTX argument from svcctl_set_secdesc
s3:services_db: use temp talloc ctx in svcctl_get_secdesc()
s3:services_db: change svcctl_get_secdesc() to use reg_api functions
s3:services_db: make svcctl_lookup_dispname() use a temp talloc ctx
s3:services_db: change svcctl_lookup_dispname() to use reg_api functions
s3:services_db: rewrite svcctl_lookup_description() to use a tmp talloc ctx
s3:services_db: change svcctl_lookup_description() to use reg_api functions
s3:services_db: factor out common code of lookup_dispname and lookup_description
s3:services_db: publish svcctl_get_string_value()
s3:srv_ntsvcs_nt: make fill_svc_config() use svcctl_get_string_value()
s3:rpc_server: registry is not direclty used in the svcctl server any more
s3:rpc_server:ntsvcs: use svcctl_lookup_dispname instead of legacy svcctl in _PNP_GetDeviceRegProp
s3:rpc_server:ntsvcs: registry is not directly used an more.
s3:services_db: remove unused legacy function svcctl_fetch_regvalues().
s3:services_db: remove bogus comments
s3:services_db: create the "Security" subkey if it does not exist in svcctl_set_secdesc()
s3:services_db: extract core of svcctl_set_secdesc to _internal version
s3:services_db: rewrite svcctl_init_keys() to use reg_api calls instead of legacy
s3:services_db: does not need legacy registry code any more.
s3:registry: remove now (finally) obsolete reg_util_registry.{c,h}
s3:registry: regfio fix the build
s3:services_db: convert get_common_service_dispname() to talloc
s3:registry:reg_api: update (C)
s3:registry: move the reg_api prototypes to their own header.
s3:registry: move reg_api_regf prototypes to their own header file.
s3:registry: move prototypes from reg_init_basic.c to their own header.
s3:registry: move prototype from reg_init_full.c to its own header.
s3:registry: move prototype from reg_init_smbconf.c to its own header.
s3:registry: move the reg_db.h from include/ to registry/
s3:registry: move regio.h from include/ to registry/
s3:tests: fix misplaced '...' for grep pattern in test_net_registry.sh
s3:registry: remove unneeded TALLOC_CTX argument from reg_deletekey_recursive
s3:net: add subcommand net registry deletekey_recursive
add script to build only the manual pages (not all the docs) - git version
add script to build only the manpages (not the complete docs) - no-git version
docs: use abs_top_builddir instead of BUILDDIR to let configure create correct catalog file
no need any more to create catalog file manually in build-manpages-git
no need any more to manually create catalog file in build-manpages-nogit
s3:registry: try to fix the build of reg_parse_internal on HP-UX
libsmbconf: parse an empty share as empty share, not as NULL.
s3:registry: fix some trailing spaces in reg_backend_db
s3:winbindd: fix query_user_list for users with NULL full_name
s3:winbindd: fix query_user for users with NULL full name.
util/charset: remove a duplicate comment.
s3:lib/charcnv: add next_codepoint_ext() that accepts input charset.
s3:lib/charcnv: reformat comments in next_codepoint_ext()
s3:lib/charcnv: rename a parameter for clarity in next_codepoint_ext()
s3:lib/charcnv: clarify comments in next_codepoint_ext()
s3:lib/util_str: clarify the comment header for strlen_m().
s3:lib/util_str: add strlen_m_ext() that takes input and output charset
s3:util_str: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
lib/charset/charcnv: add next_codepoint_convenience_ext() that accepts input charset.
lib/charset/charcnv: rename a parameter of next_codepoint_convenience_ext() for clarity
lib/charcnv/util_unistr: add next_codepoint_ext() that accepts input charset.
lib/util/charset/util_unistr: add strlen_m_ext that takes input and output charset
lib/util/charset/util_unistr: add strlen_m_ext_term() - variant of strlen_m_ext() counting terminator
lib/util/charset/util_unistr: clarify the comment header for strlen_m().
lib/util/charset/charconv: clarify comments in next_codepoint_convenience_ext()
librpc/ndr: use new strlen_m_ext_term() in ndr_charset_length(): fix bug #7594
s3:smbd: remove some commented out legacy code
s3:registry: improve debug messages about regdb refcount changes
docs: clarify the idmap_ad manpage (bug #6322)
docs: clarify the idmap_rid manpage (bug #7788)
util_net: fix a comment typo in interpret_string_addr_internal()
s3:net: disable dynamic dns updates at the end of "net ads join" in a cluster (bug #7871)
s3:net: add net_update_dns_ext() that accepts a list of addresses as parameter (bug# 7871)
s3:net ads dns register: add support for specifying addresse on the commandline (bug #7871)
Michael Wood (1):
Make upgrade procedure more explicit.
Nadezhda Ivanova (72):
s4-ldap: Fixed a problem with NC's having a parentGUID attribute
s4-dsdb: Fixed a call to the wrong ops function in dsdb_module_search_dn.
s4-ldap: Added a control to apply the access checks on read via LDAP
s4-dsdb: Moved some helper functions to a separate file
s4-dsdb: A helper to determine if an attribute is part of the search filter
s4-dsdb: Added a function to check access on a particular object by its guid
s4-tests: Removed search tests with anonymous credentials as they fail againts Windows
s4-tests: Added tests for search checks on attributes
s4-ldbmodules: Added new module aclread to handle access checks on LDAP search
s4-ldb: Added ldb_request_replace_control
s4-dsdb: adapted check_access_on_dn for use in drs.
s4-drs: Added drs_security_access_check function
s4-drs: Added check for drs-manage-topology to updateRefs.
s4-rodc: RODC should not accept requests for role transfer
s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to determine the source of the request
s4-ldb: Added the correct extended check for read access to nTSecurityDescriptor
s4-dsdb: Implemented value restrictions for the dSHeuristics attribute
s4-tests: Tests for the dSHeuristics attribute value restrictions
s4-tests: Acl tests should use the existing samdb domain_dn method instead of defining a new one
s4-tests: Descriptor tests should use the existing samdb domain_dn method instead of defining a new one
s4-tests: Changed acl tests to use existing method in samdb for adding users to a group.
s4-tests: Changed descriptor tests to use existing method in samdb for adding users to a group.
s4-tests: Modified acl tests to use pyldb api to retrieve configuration dn.
s4-tests: Modified descriptor tests to use pyldb api to retrieve configuration and schema dn.
s4-dsdb: Added a helper to python SamDB for retrieving and setting minPwdAge.
s4-tests: Adapted acl.py to use set_minPwdAge from SamDB.
s4-tests: Adapted passwords.py to use set_minPwdAge from SamDB.
s4-dsdb: Added python helpers for getting and seting dSHeuristics to SamDB
s4-tests: Acl tests now use the get_dsheuristics and set_dsheuristics from SamDB.
s4-tests: Password tests now use the get_dsheuristics and set_dsheuristics from SamDB.
s4-tests: Ldap tests now use the get_dsheuristics and set_dsheuristics from SamDB.
s4-dsdb: Added a python method to SamDB for creating organizationalUnits
s4-tests: Modified acl.py to use SamDB.create_ou()
s4-tests: Modified sec_descriptor.py to use SamDB.create_ou()
s4-dsdb: Extended samdb.newuser to accept security descriptor for the object and optionally skip password reset
s4-tests: Modified acl.py to use samdb.newuser instead of custom methods.
s4-tests: Modified sec_descriptor.py to use samdb.newuser instead of custom methods.
s4-dsdb: Changed filter to find the account of a user by samAccountName
s4-tests: Modified acl.py to use samdb.newgroup instead of custom methods.
s4-dsdb: Extended samdb.newgroup to set the group's security descriptor.
s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally defined method.
s4-tests: Added a common definition of delete_force.
s4-tests: Modified acly.py to use common delete_force instead of defining its own.
s4-tests: Modified bind.py to use samba.tests.delete_force
s4-tests: Modified deletetest.py to use samba.tests.delete_force
s4-tests: Modified ldap.py to use samba.tests.delete_force
s4-tests: Modified ldap_schema.py to use samba.tests.delete_force
s4-tests: delete_force was unused, removed it.
s4-tests: Modified passwords.py to use samba.tests.delete_force
s4-tests: Modified sam.py to use samba.tests.delete_force
s4-tests: Modified sec_descriptor.py to use samba.tests.delete_force
s4-tests: Modified speedtest.py to use samba.tests.delete_force
s4-dsdb: Fixed wrong assignment of name attribute to description atribute in create_ou.
s4-dsdb: Switched to using a dictionary in create_ou for consistency.
s4-tests: Modified create_ou to only accept security.descriptor type for sd to avoid confusion
s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulated
s4-acl: Moved aclread module below descriptor and acl.
s4-acl: Some optimisation of the aclread module
s4-acl: Remove unused variables from aclread module.
s4-acl: Added a flag to mark an element as failing an access check.
s4-acl: Changed the mechanism of attribute removal to speed it up.
s4-acl: Fixed incorrect value of LDB_FLAG_INTERNAL_INACCESSIBLE_ATTRIBUTE
s4-acl: Replaced talloc_reference with talloc_steal, as aclread is the only one using this result message.
s4-tests: Moved some commonly redefined security descriptor methods to a utils class
s4-tests: Modified acl.py to use the sd_utils helpers.
s4-tests: Modified sec_descriptor.py to use the sd_utils helpers.
s4-dsdb: Fixed incorrect LDAP return code when anonymous login is used.
s4-tests: Added tests for LDAP add/delete/modify using anonymous login.
s4-tests: Added a speedtest for LDAP search operations with different accounts.
s4-dsdb: Added a helper function to get the default dns domain as string.
s4-acl: Implementation of Validated-SPN validated write
s4-tests: Tests for Validated-SPN implementation.
Philip M. White (1):
s4:waf - fix the build on Gentoo platforms
Ricardo Jorge (1):
pyrpc: Build the samba.dcerpc.srvsvc module.
Rusty Russell (7):
Really enable core dumps in Linux
tdb: add Bob Jenkins lookup3 hash as helper hash.
tdb: automatically identify Jenkins hash tdbs
tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash.
tdb: fix non-WAF build, commit 1.2.6 ABI file.
idtree: fix right shift of signed ints, crash on large ids on AIX
idtree: fix overflow for v. large ids on allocation and removal
Samba-JP oota (2):
This is typo fix patch for smbcacls.1.xml .
s3-docs: Update 3.2 features.
Simo Sorce (21):
s3-dcerpc: move crypto stuff in /librpc/crypto
gssapi: avoid explicit dependency on dcerpc specific structures
gssapi: remove unused function argument
s3-dcerpc: add server helpers for ntlmssp auth
s3-dcesrv: use ntlmssp helper in srv_pipe.c
s3-dcerpc: add server helpers for gssapi auth
s3-dcesrv: use gssapi helper in srv_pipe.c
spnego: avoid explicit dependency on dcerpc specific structures
s3-dcerpc: move client spnego stuff in /librpc/crypto
spnego: make spnego_context public
s3-dcerpc: add spnego server helpers
s3-dcerpc: use new spnego server code
s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_data
srv_pipe: reorganize code so that related functions are close to each other
s3-dcerpc: make auth context opaque
s3-dcerpc: remove auth_data_free_func
libcli: fix compile warning
s3-dcerpc: Use spnego own sign/seal functions
s3-dcerps: check auth_type
talloc: make header C++ safe
ldb: error out when modules are not found
Stefan Metzmacher (191):
s3:rpc_client: allow DCERPC_PKT_AUTH3 via rpc_api_pipe_send/recv
s3:rpc_client: rpc_pipe_bind_step_one_done() doesn't need reply_pdu
s3:rpc_client: use rpc_api_pipe_send() for auth3
s3:rpc_client: remove unused rpc_pipe_set_hnd_state()
waf: fix typos in GIT_COMMIT_* strings
waf: add a '+' to the git hash if the working tree isn't clean
s4:irpc: add padding to the IPRC header for 8 byte alignment
s4:irpc: use LIBNDR_FLAG_REF_ALLOC for the server side when pulling
s4:dsdb/kcc: we don't need to manually allocate [out,ref] pointers anymore
pidl:NDR/Parser: fix range() for arrays
libcli/util: let tstream_read_pdu_blob_* cope with variable length headers
lib/util/asn1: add asn1_peek_tag_needed_size() and asn1_peek_full_tag()
libcli/ldap: let ldap_full_packet() use asn1_peek_tag_needed_size()
s4:schannel: handle move flag combinations in the server
lib/util: change tevent_req_nterror() to a macro
libcli/ldap: correctly marshall LDAP Unbind PDUs
s4:libcli/ldap: fix sending oneway requests
LDAP-BASIC: test AbandonRequest
s4:torture/ldap: close connections with an UnbindRequest
s4:irpc: optionaly pass the security_token via IRPC requests.
tsocket: make sure we delete the fd event before calling close()
s4:rpc_server: use SOCKET_FLAG_NOCLOSE to avoid calling close() on the socket fd twice.
s4:wrepl_server: use SOCKET_FLAG_NOCLOSE instead of a dup()
s4:gensec: add gensec_create_tstream()
s4:lib/tls: add gnutls backend for tstream
s4:gensec_tstream: remove plain socket handling
pidl/Typelist: let typeIs() do TYPEDEF dereference in the HASH case
pidl/Python: remove todo handling from PythonFunction(), it's done by the caller
pidl:NDR/Client.pm: remove unreached code
pidl/Python: use has_property($d, "noopnum") helper function
pidl: remove unused async property handling
librpc/ndr: remove 'async' from ndr_interface_call
pidl:NDR/Client: make the generated code look a bit nicer
pidl:NDR/Parser: simplify logic in ParseMemCtxPullFlags()
pidl:NDR/Parser: remove unused code for array element index
pidl: add support for pointers in typedefs
testprogs/win32: add vs2010-metze.cmd
midltests: move the current implementation to midltests_simple.exe
midltests: add a midltests_tcp.exe tool
midltests: make it possible to allow downgrades to NDR32
midltests: add some usefull defines to midltests.idl
midltests: add midltests-pipe-sync-ndr32-downgrade-01.idl example
midltests/todo: add some random idl files I had tested month ago
midltests: revert to a simple default midltests.idl
midltests: improve NDR64 downgrade
midltests: print out the alloc_hint for requests and responses
midltests: support for fragmented RPC traffic
midltests: add midltests-pipe-sync-ndr32-downgrade-02.idl
netlogon.idl: add missing flags to DSGETDC_VALID_FLAGS
s4:rpc_server/netlogon: don't use dcerpc_binding_handle_call_send/recv() directly
s4:rpc_server/echo: fix compiler warning
tsocket: make sure we delete the fd event before calling close()
libcli/ldap: ldap_full_packet() requires at least 6 bytes
lib/util/asn1: let asn1_peek_full_tag() return an error if we fail to parse tag hdr/len
s4:ldap_server: rewrite to socket layer to use tstream
Revert "s4:ldap_server: rewrite to socket layer to use tstream"
s4:lib/tls: fix enabled logic in tstream_tls_params_server()
s4:lib/tls: make more clear what the immediate event is for
s4:lib/tls: buffer writes in tstream_tls_push_function()
s4:ldap_server: rewrite to socket layer to use tstream
socket_wrapper: Make it work on freebsd for udp packets
librpc: Fixed memory context of dcerpc_binding_from_tower.
libcli/util: add pipe related NT_STATUS_RPC_* codes
s3:libsmb: add pipe related NT_STATUS_RPC_* codes
s4:libcli/util: add pipe related NT_STATUS_RPC_* codes
s4:nbt_server/wins: fix compiler warnings
s4:nbt_server/winsclient: add a nbtd_wins_refresh_state
libcli/nbt: move nbt_name_refresh_wins_send() to the top of all nbt_name_refresh_wins_* related code
libcli/nbt: s/refresh_wins_state/nbt_name_refresh_wins_state
libcli/nbt: s/name_refresh_wins_handler/nbt_name_refresh_wins_handler
libcli/nbt: convert nbt_name_refresh_wins_send/recv to tevent_req
s4:nbt_server/winsclient: add a nbtd_wins_register_state
libcli/nbt: move nbt_name_register_wins_send() to the top of all nbt_name_register_wins_* related code
libcli/nbt: s/register_wins_state/nbt_name_register_wins_state
libcli/nbt: s/name_register_wins_handler/nbt_name_register_wins_handler
libcli/nbt: convert nbt_name_register_wins_send/recv to tevent_req
s4:nbt_server/register: add a nbtd_register_name_state
libcli/nbt: move nbt_name_register_bcast_send to the top of nbt_name_register_bcast_*
libcli/nbt: s/register_bcast_state/nbt_name_register_bcast_state/
libcli/nbt: s/name_register_bcast_handler/nbt_name_register_bcast_handler
libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_req
libcli/nbt: we don't need LIBCLI_COMPOSITE anymore
lib/replace: fix rep_strtoull() prototype
lib/replace: use snprintf() in test code to avoid warnings in the IBM-Checker
tsocket: ask the kernel for the specific local address after a tcp connect
tsocket: let tstream_inet_tcp_connect_recv() optionally return the used local address
misc.idl: add SEC_CHAN_LOCAL and SEC_CHAN_LANMAN
s4:rpc_server/netlogon: netr_GetDcName should return WERR_DCNOTFOUND for invalid names
s4:rpc_server/netlogon: validate flags in netr_DsRGetDCNameEx2() and callers
s4:rpc_server/netlogon: handle DC_RETURN_NETBIOS and DC_RETURN_DNS in netr_DsRGetDCNameEx2()
s4:rpc_server/netlogon: fix comment in netr_DsRGetDCName()
s4:rpc_server/netlogon: netr_ServerAuthenticate3 should check the challenge after the account
s4:rpc_server/netlogon: netr_ServerAuthenticate3 should reject invalid sec_channel_types early
s4:rpc_server/netlogon: netr_ServerAuthenticate3 should return NO_TRUST_SAM_ACCOUNT
s4 dns: Parse srv and soa records
s4:librpc: we don't need dcerpc client bindings for dns.idl
midltests: add more union_align examples
pidl:Samba4/NDR/Parser: fix NDR64 union alignment
s3:include: move MAX_DEBUG_LEVEL from local.h to debug.h
s3:include: move debug.c prototypes to debug.h
talloc: pytalloc should not depend on samba specific code
autobuild: run ldb tests with TDB_NO_FSYNC=1
autobuild: add some comments
s4-waf: don't generate PACKAGE_* defines in config.h
s3-waf: use git to calculate the version if available
s3-waf: add NDR_STANDARD dependencies to fix the build
s3-waf: use NDR_NTLMSSP subsystem
s3-waf: use NDR_SCHANNEL
s3-waf: use NDR_NETLOGON for ntlm_auth
s3-waf: implement LIBMSRPC_GEN as tiny wrapper of 'NDR_STANDARD NDR_DSSETUP NDR_SPOOLSS'
s4:librpc: we don't need dcerpc client bindings for dns.idl
lib/util: remove useless ../lib/util/mutex.*
wafsamba: support 'soname' attribute on SAMBA_LIBRARY()
talloc: fix waf build for libtalloc-compat1
MAINTAINERS: add myself as maintainer for tevent and tsocket
s4:dsdb/tests/python/sam.py: test with member: <SID=...>
s4:dsdb/samldb: avoid nested unindexed searches in samldb_member_check()
replace/wscript: check for uint8_t
replace/wscript: define bool to int instead of off_t
replace/wscript: do the size checks directly after the type checks
replace/wscript: add size checks for stdint.h types
s4:dsdb/kcc: fix memory leak in kcctpl_copy_output_edges()
s4:dsdb/common: fix memory leak in samdb_ntds_settings_dn()
s4:dsdb/samdb: optimize samldb_prim_group_change()
s4:dsdb/objectclass_attrs: not all objects have delete protected attributes as must contain
s4:dsdb/drepl_notify: reuse dreplsrv_notify_operation structures
tsocket: fill in sa.sa_len if the system supports it
socket_wrapper: fill in sa.sa_len if the system supports it
s4:DRS-RPC-DSSYNC: don't try to decrypt secret attributes twice
s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret attributes
s4:rpc_server/drsuapi: let dcesrv_drsuapi_DsGetNCChanges() use DSDB_SECRET_ATTRIBUTES
s4:rpc_server/drsuapi: make msg_attrs static const
s4:rpc_server/drsuapi: don't ask for constructed "distinguishedName" if we don't use it
s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTES
s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static const
s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTES
s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()
s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()
tdb: set tdb->name early, as it's needed for tdb_name()
buildtools: fix --git-local-changes option
talloc: add ABI/talloc-2.0.4.sigs
tls_tstream: use a dynamic buffer for the push case
lib/torture: add torture_assert_u64_equal_goto()
s3:ntlm_auth: fix memory leak in the raw ntlmssp code path
s3:ntlm_auth: free session key, as we don't use it (at least for now)
s3:ntlm_auth: support clients which offer a spnego mechs we don't support
libcli/auth: let spnego_write_mech_types() check the asn1_load() return
buildtools: make sure we have no '+' in the version scripts
buildtools: add the PRIVATE_EXTENSION for private libraries
buildtools: private_libraries should not have a version in the soname
s4:python: add PyString_FromStringOrNULL() to pyrpc_util
pidl:Samba4/Python.pm: use PyString_FromStringOrNULL() from pyrpc_util
talloc: remove unused PyString_FromString_check_null() from pytalloc-util
talloc: mark pytalloc-util functions as _PUBLIC_
talloc: build pytalloc-util with the same logic as libtalloc
s4:ldb: build libldb and pyldb-util as private libraries when building for samba4
s4:ldb: add ABI/ldb-0.9.20.sigs
dcerpc.idl: fix typo 0x800000000 => 0x80000000
talloc: pytalloc-util should not have an ABI-file yet
s4:pyrpc_util: s/typename/type_name to avoid c++ warnings
pidl:Samba4/Python.pm: don't handle scalar reference types special
pidl:Samba4/Python.pm: ignore "SUBCONTEXT" levels
drsblobs.idl: remove nopython from package_PrimaryKerberosBlob related stuff
libcli/echo: lowercase testsuite names
s4:selftest: use correct name for the test "ECHO-UDP" => "echo.udp"
libcli/echo: fix off by 1 crash bug
s4:heimdal_build: replace '+' by '_' for vscripts in HEIMDAL_LIBRARY()
s3:selftest: fix knownfail for samba3.posix_s3.rpc.spoolss.*printserver.enum_printers_old
s4:dsdb:util: dsdb_get_single_valued_attr() only needs a const ldb_messages
s4:ldap_server: rename helper functions to ldapsrv_ prefix and pass ldapsrv_call
s4:ldap_server: don't call ldb_req_mark_untrusted() on the privileged ldapi socket
s4:ldap_controls: allow DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID over sockets.
s4:dsdb:password_hash: verify content if the BYPASS_PASSWORD_HASH control is used
s4:gensec/spnego: only look at the optimistic token if we support the first mech
s3:libsmb: add cli_np_tstream.c
s3:libsmb: add tstream_is_cli_np()
s3:libsmb: add tstream_cli_np_use_trans() and the needed logic
s3:libsmb: add tstream_cli_np_set_timeout()
s3:libsmb: add tstream_cli_np_get_cli_state()
s3:rpc_client: let rpc_transport_tstream_init() create read and write queue
s3:rpc_client/rpc_transport_tstream: timeout should be unsigned int
s3:rpc_client/rpc_transport_tstream.c: add some logic to handle cli_np tstreams
s3:rpc_client: implement rpc_transport_sock_init() on top of rpc_transport_tstream_init()
s3:rpc_client: implement rpc_transport_np_init() on top of rpc_transport_tstream_init()
s3:net ads dns register: use "cluster addresses" option if configured (bug #7871)
s3:cli_np_tstream: if SMBtrans is desired, the readv needs to wait for the last writev chunk.
s3:libsmb/namequery.c: don't leak 'pserver'
s3:lib/gencache: fix memory leak in error path
s3:libsmb: use 16 zero bytes as channel binding checksum in the gssapi checksum (bug #7883)
tevent: add ABI/tevent-0.9.10.sigs
tdb: add ABI/tdb-1.2.8.sigs
Steven Danneman (3):
s4:libcli:smb2 Rename pending_id to async_id and make 64-bit
s3:events: Call all ready fd event handlers on each iteration of the main loop
s3:smbd: Increase unsupported IOCTL debug message to 2
Sumit Bose (1):
Fix array size of a memmber of struct cli_ulogoff_state
Sven Neumann (1):
Fix bug 7754 - samba uses index(), marked as legacy.
Tim Potter (2):
Fix some warnings at higher -W levels in pidl generated code.
Include misc.idl for policy_handle in srvsvc.idl.
Volker Lendecke (255):
s3: Wrap the ntlm_auth loop with a talloc_stackframe
s3: Split off output generation from manage_squid_ntlmssp_request
s3: Fall back to raw NTLMSSP for the gss-spnego protocol
s3: Correctly unwrap the krb ticket in gss-spnego
s3: Add the PAC info3 struct to the netsamlogon_cache in ntlm_auth
s3: Fix some nonempty blank lines
s3: Fix bug 7688, rpcclient command line completion crashing
s3: Add a missing prototype
s3: Fix the charset_pull routine (bug 7531)
s3: Remove a pointless if-statement
s3: Remove a global variable in bugfix for bug 7665
s3: Fix pam_smbpass logging on FreeBSD
s3: Use asprintf where appropriate
s3: tdbdump does not use our libs
tdb: add restore
talloc: Add a warning about talloc_autofree_context() and dlclose()
s3: Fix bug 7470
s3: Fix some 64-bit warnings
s3: Fix a typo
s3: Remove talloc_autofree_context() from init_system_info()
s3: Fix a memleak in make_new_server_info_system()
s3: Lift talloc_autofree_context() from make_auth_context()
s3: Lift talloc_autofree_context() from make_auth_context_text_list()
s3: Lift talloc_autofree_context() from make_auth_context_subsystem()
s3: Lift talloc_autofree_context() from make_auth_context_fixed()
s3: Avoid an explicit ZERO_STRUCT
s3: Remove talloc_autofree_context() from get_root_nt_token()
s3: Remove talloc_autofree_context() from ctdb_read_req()
s3: Remove talloc_autofree_context() from messaging_tdb_parent_init()
s3: Remove talloc_autofree_context() from serverid_parent_init()
s3: Remove talloc_autofree_context() from serverid_db()
s3: Remove two talloc_autofree_context() calls
s3: Remove talloc_autofree_context() from pdb_init_ads()
s3: Remove talloc_autofree_context() from lookup_unix_user_name()
s3: Remove talloc_autofree_context() from net_sam_provision()
s3: Remove talloc_autofree_context() from smbpasswd
s3: Remove talloc_autofree_context() from swat
s3: Remove talloc_autofree_context() from change_to_guest()
s3: Remove talloc_autofree_context() from notify_internal_parent_init()
s3: Remove talloc_autofree_context() from getpwnam_alloc()
s3: Remove talloc_autofree_context() from guest_user_info()
s3: Remove talloc_autofree_context() from nametouid()
Lift talloc_autofree_context() from OpenConfFile()
Remove talloc_autofree_context() from pm_process
s3: Fix some comments
s3: Remove some unused code
s3: Make file_fnum static
s3: Remove talloc_autofree_context() from receive_unexpected()
s3: Remove "server_fd" global variable
s3: Move "Files" to smbd_server_connection
s3: Lift smbd_server_conn from file_fnum
s3: Remove smbd_server_conn from file_new and file_free
s3: Remove smbd_server_conn from file_close_conn
s3: Remove smbd_server_conn from file_close_pid
s3: Remove smbd_server_conn from file_close_user
s3: Remove smbd_server_conn from files_forall
s3: Lift smbd_server_conn from file_find_dif
s3: Lift smbd_server_conn from file_find_di_first
s3: Remove smbd_server_conn from file_find_subpath
s3: Remove smbd_server_conn from file_sync_all
s3: Slightly simplify file_fnum
s3: Remove smbd_server_conn from file_fsp
s3: Lift smbd_server_conn from file_find_fd
s3: Remove talloc_autofree_context() from files.c
s3: Remove some remaining files.c globals to sconn
s3: Remove talloc_autofree_context() from myhostname()
s3: Remove two calls to procid_self()
s3: Lift smbd_messaging_context() from open_sockets_smbd()
s3: Increase the debuglevel for connection termination msgs
s3: Attempt to fix bug 7518
s3: Fix a typo in dump-domain-list smbcontrol usage msg
s3: Re-introduce a procid_self()
s3: Add "smbcontrol winbindd ip-dropped <local-ip>"
s3: Fix a 64-bit BUG
s3: Attempt to fix bug 7665
s3: Attempt to fix the non-ads build
s3: Remove talloc_autofree_context from pdb_interface
s3: Remove talloc_autofree_context() from srv_samr_nt.c
s3: Remove talloc_autofree_context() from unexpected.c
s3: Remove talloc_autofree_context() from dmapi.c
s3: Attempt to fix a ton of warnings on the build farm
s3: Attempt to fix the IRIX build
s3: Move #define VALGRIND to config.h
s3: I thought I had compiled this....
s3: Add msg_ctx_to_sconn
s3: Lift smbd_server_conn from initial_break_processing
s3: Remove smbd_server_conn from process_oplock_async_level2_break_message
s3: Remove smbd_server_conn from process_oplock_break_message
s3: Remove smbd_server_conn from process_kernel_oplock_break
s3: Remove smbd_server_conn from smb2 receive_unlock_msg
s3: Remove smbd_server_conn from msg_close_file
s3: Remove smbd_server_conn from validate_my_share_entries
s3: Remove smbd_server_conn from msg_file_was_renamed
s3: Remove smbd_server_conn from smb1 receive_unlock_msg
s3: Remove smbd_server_conn from process_blocking_lock_cancel_message
s3: Remove smbd_server_conn from msg_force_tdis
s3: Attempt to get the Tru64 build a bit further
s3: Fix a pointer error
s3: Stop using the write cache after an oplock break
s3: Make the write end of the echo responder pipe non-blocking
tevent: Only call handlers that ask for events
s3: Fix the async echo responder for netbios keepalives
s3: Fix input check in is_encrypted_packet
Move talloc_enable_null_tracking() to the s3 daemons
tevent: Do not use talloc_autofree_context
s3: Implement echo_TestSleep
s3: Add a little test for the echo responder
s3: Remove talloc_autofree_context() from loadparm.c
s3: Remove talloc_autofree_context() from get_printer_list_db()
s3: Call printer_list_parent_init in the parent
s3: Hang the linux kernel oplocks off the NULL ctx
s3: Hang the irix kernel oplocks off the NULL ctx
s3: Hang the isilon kernel oplocks off the NULL context
s3: Rename "conn" to the more used "sconn" in process_smb()
s3: Remove some explicit smbd_server_conn refs in process_smb()
s3: Lift smbd_server_conn from receive_smb_raw_talloc_partial_read
s3: Lift smbd_server_conn from receive_smb_raw_talloc
s3: Lift smbd_server_conn from receive_smb_talloc
s3: Remove smbd_server_conn from construct_reply
s3: Cope with EINTR in smbd_[un]lock_socket
s3: Add some DEBUG
uid_wrapper: The gid wrapper does not require a destructor
s3: Don't use talloc_autofree_context in map_file
s3: Add any_nt_status_not_ok
s3: Use any_nt_status_not_ok in winbind
s3: Make "unpack_pjob" static
s3: Rename cli_fileinfo() to cli_fileinfo_basic()
s3: Add async cli_qfileinfo
s3: Convert cli_qfilename to cli_qfileinfo
s3: Convert cli_qfileinfo_basic to cli_qfileinfo
s3: Replace cli_qfileinfo_test with a call to cli_qfileinfo
s3: Remove unused cli_get_ea_list_fnum
s3: Initialize output vars in parse_ea_blob
Add print_asc_cb()
Add dump_data_cb()
s3: Add "geteas" to smbclient
s3: Add "setea" to smbclient
s3: Add async cli_setpathinfo
s3: Pass down a level instead of a flag to cli_posix_link_internal
s3: Use tevent_req_simple_recv_ntstatus where appropriate
s3: Use cli_setpathinfo in cli_posix_link_internal
s3: Use cli_setpathinfo in cli_posix_chown_chmod_internal
s3: Avoid passing down a boolean to cli_posix_unlink_internal_send
s3: Use cli_setpathinfo in cli_posix_unlink_internal
s3: Pass tdb_flags to ctdbd when attaching to a db
s3: Package tdbrestore in RHEL-CTDB
s3: Fix some DEBUG msgs
s3: Make gpfs winattrs work again
s3: FILE_WRITE_DATA & friends have gone from includes.h
s3: Fix the registry upgrade code
s3: Streamline regdb_normalize_keynames_fn a bit
s3: Fix a typo in a DEBUG msg
s3: Do not connect to ctdb if it is blocked for some reason
s3: Add "net registry getvaluesraw"
s3: Fix a getgrent crash with many groups
s3: Align nttrans replies the same way Windows does it
s3: Remove an unused prototype
s3: Remove the use of cli_send_trans from cli_get_fs_full_size_info
s3: Allow disabling of mdns registrations
s3: Remove some duplicate prototypes
s3: Fix a typo
s3: Make proper use of sid_check_is_in_xx routines
s3: Consistently use stdbool types in new code
s3: Put some parentheses around conditionals
s3: Build idmap_autorid by default
s3: Fix an uninitialized variable
raw.h is only needed in the S4 build
s3: Package autorid module
s3: Quieten a bogus error message
s3: Untangle an if-expression
s3: Remove some dead code
s3: Make split_dfs_path return bool
s3: cli_dfs_check_error does not need to depend on cli->inbuf
s3: Convert cli_dfs_get_referral to cli_trans
s3: Convert cli_set_ea() to cli_trans()
s3: Remove two pointless variables
s3: Make cli_set_ea_path return NTSTATUS
s3: Make cli_set_ea_fnum return NTSTATUS
s3: Well... Fix a stupid error
s3: Convert cli_get_posix_fs_info() to cli_trans()
s3: Avoid two calls cli_errstr
s3: string_to_sid does thorough syntax checking
s3: Remove some unused code
s3: Move parse_sidlist to the only calling file
"bool ? true : false" is a bit pointless
s3: Remove a reference to "winbindd_cli_state" from append_auth_data
s3: Remove a reference to "winbindd_cli_state" from append_unix_username
s3: Remove a reference to "winbindd_cli_state" from append_info3_as_ndr
s3: Remove a reference to "winbindd_cli_state" from append_afs_token
s3: Remove a reference to "winbindd_cli_state" from append_info3_as_txt
s3: Remove a reference to "winbindd_cli_state" from append_auth_data
s3: Fix a missing return value
s3: Make winbind recover from a signing error
s3: Call sid_check_is_domain instead of dom_sid_equal
s3: Remove some unused code
s3: Make ads_do_search_retry_args() static
s3: Remove unused ads_search_retry_extended_dn
s3: Fix some nonempty blank lines
s3: Make ads_ranged_search_internal static
s3: Make ads_get_attrnames_by_oids static
s3: Remove unused ads_get_attrname_by_oid
s3: Remove a #define used just once
s3: Use sid_check_is..
s3: Fix some typos
s3: Add a word of warning about "winbind use default domain"
s3: Correctly calculate the wbinfo -s result
s3: Fix filling in the pam_auth_crap domain name
s3: Return the correct result from winbindd_dual_auth_passdb
libwbclient: Fix a division by zero
libwbclient: Correctly order the wbcAllocateMemory args
s3: Use localtime_r, libreplace defines it
s3: Add gencache_parse
s3: Convert gencache_get_data_blob to gencache_parse
s3: Add gencache_iterate_blobs
s3: Properly print binary values "net cache"
s3: Add cli_shadow_copy_data
s3: Add shadow copy info to smbclient allinfo
s3: Fix bug 7832
s3: Attempt to fix the shadow_copy2 module
s3: Fix a typo
s3: Attempt to please autobuild
s3: Fix bug 7841: WINBINDD_LOOKUPRIDS asks the wrong domain
s3: Fix bug 7842: WINBIND_LOOKUPRIDS does not return the proper domain name
s3: Fix bug 7844: Race in winbind
s3: Fix serverid_exists
s3: Add -P as an alias for --ping-dc
s3: Document wbinfo -P/--ping-dc
s3: Fix some typos
s3: re-add some debugs to check_reduced_name
s3: Did I say this module is from hell?
s3: Fix some nonempty blank lines
s3: Reply correctly to FSCTL_IS_VOLUME_DIRTY
s3: FreeBSD has getpeereid(), use it
s3: Remove two pointless slprintf calls
s3: netsamlogon_clear_cached_user only needs the SID
s3: wcache_invalidate_samlogon only needs the SID
libwbclient: Put the wb_reqtrans definitions into wb_reqtrans.h
Move wbc_async.[ch] to its only user: smbtorture3
wb_reqtrans is not used in libwbclient
s3: Use the right uid winbindd_raw_kerberos_login()
s3: Fix bug 7066 -- wbcAuthenticateEx gives unix times
s3: "make etags" should not grow TAGS infinitely...
lib: Protect against tevent nterror mismatches
s3: Remove some unused variables
s3: Always retry the DC connection in auth_domain
s3: Remove unused "retry" from cli_full_connection
s3: Remove unused "retry" from cli_start_connection
s3: Add some const to name_mangle()
s3: Add async cli_session_request
s3: Add an async smbsock_connect
s3: Add smbsock_any_connect
s3: Test smbsock_any_connect
s3: Retry *SMBSERVER in nb_connect
s3: Use smbsock_any_connect in winbind
s3: Remove unused open_any_socket_out
Volodymyr Khomenko (1):
s3: Fix bug 7759
Wilco Baan Hofman (12):
Fix registry parsing of strings to also support the windows method.
Fix .reg file format parsing.
Make sure that regf only writes to disk every five seconds or when flushed or destroyed
Make sure we write the value stored in value, not line (doublequoted).
Fix hex():00,00,00 bugs and strtol dword bugs, these values are explicitly hex.
Do not include the closing doublequote in .reg files.
The root key should be created as a root key, not subkey.
5 uint32_t's should be set, not 5 bytes.
Fix registry editor to be compatible with Windows 7.
Fix patchfile_dotreg to write proper .reg files: 'hex(1..B):', 'dword:', etc
Fix issues addressed by Jelmer:
Make sure REG_SZ is properly written to a .reg file (not as hex(1)), fix trailing comma REG_BINARY.
Zahari Zahariev (4):
LDAPCmp feature to compare nTSecurityDescriptors
Speed test with user objects
Cannot create OU using custom Schema class
Typos in wintest
olivier (1):
switch from mtime to ctime which is more reliable if files can be accessed outside samba as well
wilco at baanhofman.nl (4):
Add python bindings for open_hive function to be able to load REGF files.
Fix crash when no subkeys exist. Fix writing outside of buffer error by regf backend.
Fix file corruption (non-updated header) on new allocation.
Fix regf.idl, subkey and rootkey types were switched.
-----------------------------------------------------------------------
--
Samba Shared Repository
More information about the samba-cvs
mailing list