[SCM] Samba Shared Repository - annotated tag release-3-6-0pre1 created

Karolin Seeger kseeger at samba.org
Wed Jul 28 04:26:14 MDT 2010

The annotated tag, release-3-6-0pre1 has been created
        at  c5e1267be0974292e7e2052b876777c66ac903de (tag)
   tagging  d5e4d87767cfc9e8f92fd99222c1e3af3de59d75 (commit)
  replaces  release-4-0-0alpha11
 tagged by  Karolin Seeger
        on  Wed Jul 28 12:24:24 2010 +0200

- Log -----------------------------------------------------------------
tag release-3-6-0pre1
Version: GnuPG v2.0.12 (GNU/Linux)


Anatoliy Atanasov (19):
      s4/drs:kccdrs_replica_get_info_obj_metadata implementation
      s4/drs: add DRSUAPI_ATTRIBUTE_options attribute
      s4/rodc: change the libnet_become_dc code to do RODC join
      s4/libnet: Fix misleading comment
      s4/rodc: Implement samdb_rodc with ldb context
      s4/rodc: RODC FAS initial implementation
      s4/rodc: Implement msDS-isRODC constructed attr
      s4/test: Implement tests for msDS-isRODC constructed attribute
      s4/rodc: Fix the callbacks up the stack to handle referrals on modify requests
      s4/rodc: Support read-only database
      s4/waf: ABI update for lib/ldb
      s4-rodc: Fix provision warnings by creating ntds objectGUID in provision
      Revert "s4-rodc: Fix provision warnings by creating ntds objectGUID in provision"
      s4-rodc: Cache am_rodc flag
      s4-rodc: Set am_rodc flag during provision
      s4: check the sacl and dacl pointers on the old sd
      s4:auth/session.c - free "group_string" when not needed
      s4:schema/schema_set.c - free LDB message diffs
      s4/schema: remove unnecessary deletion of dsdb_schema cached pointer

Andreas Schneider (276):
      tsocket: Added complete doxygen documentation.
      tsocket: Added doxygen config file.
      s4-ntp_signd: Migrate to tsocket.
      s4-torture: Migrate ntp_signd test to tsocket.
      s4-winbind: Migrated winbind connection to tsocket.
      s4-libcli: Fixed a talloc_reference error.
      talloc: Documented talloc with doxygen.
      talloc: Added doxygen config file.
      Move the talloc details to the mainpage.
      s3-print: Remove obsolete signal type cast.
      s3-passdb: Remove obsolete signal type cast.
      s3-pam_smbpass: Remove obsolete signal type cast.
      s3-nmbd: Remove obsolete signal type cast.
      s3-libads: Remove obsolete signal type cast.
      s3-lib: Remove obsolete signal type cast.
      s3-smb: Remove the obsolete signal type cast.
      s4-smbd: Remove obsolete singal type cast from the thread process model.
      libutil: Remove obsolete signal type cast.
      libreplace: Remove the obsolete signal type cast.
      s4-smb: Migrate named_pipe_server to tsocket.
      tstream: Added a typedef for the function prototype.
      tsocket: Improve the tsocket_address_bsd_sockaddr documentation.
      s4-smb: Migrate named_pipe_server to tsocket.
      s4-kdc: Fixed the memory context of tstream_bsd_existing()
      s4-ntp: Fixed the memory context of tstream_bsd_existing()
      s4-winbind: Fixed the memory context of tstream_bsd_existing()
      s4-winrepl: Migrated the wins replication server to tsocket.
      s3-rpc_server: Document rpc_pipe_open_internal.
      s3-rpcclient: Leave setprinterdata directly if not enough args were passed.
      s4-gensec: Fixed wrong usage of error_string.
      Fix developer build, remove malloc
      s3-smbd: Don't close stdout if we want to log to stdout.
      s3-selftest: Don't log to stdout, use logfiles instead.
      s3-spoolss: Added a function to open a regkey using the winreg pipe.
      s3-spoolss: Added a set_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a get_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a enum_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a delete_printer_dataex function using the winreg pipe.
      s3-spoolss: Added a enum_printer_key function using the winreg pipe.
      s3-spoolss: Added a delete_printer_key function using the winreg pipe.
      s3-spoolss: Fixed winreg_printer_openkey to be used in a more generic way.
      s3-spoolss: Added a winreg_enumforms1 function.
      s3-spoolss: Added a winreg_addform1 function.
      s3-spoolss: Added a winreg_deleteform1 function.
      s3-spoolss: Added a winreg_setform1 function.
      s3-spoolss: Added a winreg_getform1 function.
      s3-winreg_nt: Fixed QueryValue with data=NULL to get the length.
      s3-time: Added a function to get the startup time of the server.
      s3-spoolss: Use const values for notify functions.
      s3-spoolss: Added missing return value to winreg_printer_enumforms1 docs.
      s3-spoolss: Fixed return values of winreg_printer_deleteform1.
      s3-spoolss: Added winreg helper functions to write registry values.
      s3-spoolss: Added a function to update the ChangeID of a printer.
      s3-spoolss: Added a function to get the ChangeID from a printer.
      s3-spoolss: Added a winreg function to query a dword.
      s3-spoolss: Added more winreg hepler functions.
      s3-spoolss: Fixed winreg_delete_printer_key if key is NULL or emtpy.
      s3-spoolss: Added a winreg_update_printer function.
      s3-spoolss: Added a winreg_create_printer function.
      s3-spoolss: Added a winreg_get_printer function.
      tsocket: Fixed the documentation of tsocket_address_bsd_sockaddr.
      s3-lib: Create a sec_desc_merge and sec_desc_merge_buf function.
      s4-torture: Fixed spoolss dsspooler printername test.
      s4-torture: Added the printername to the AddPrinter comment.
      tsocket: Added the warning again to tsocket_address_bsd_sockaddr.
      s3-libsmb: Fixed a recursion in cli_pull_print.
      tevent: Added basic doxygen documentation.
      tevent: Add doxygen tevent config file.
      tevent: Create a typedef for the debug function callback.
      tevent: Document the missing tevent async request callback functions.
      tevent: Document missing callback typedefs.
      tevent: Document the tevent helper functions.
      tevent: Document the tevent_queue functions.
      tevent: Started a tevent_queue tutorial.
      libwbclient: Fixed doxygen errors.
      s3-spoolss: Added missing Printer Driver in winreg_{update,get}_printer.
      s3-spoolss: Added missing servername option to winreg_{create,get}_printer.
      s3-spoolss: Added a sharename arg to winreg_update_printer.
      s3-spoolss: Fixed memory error in winreg_get_driver.
      s3-spoolss: Added a function to create a default spoolss_DeviceMode.
      s3-spoolss: Added a generic spoolss_create_default_secdesc function.
      s3-spoolss: Added a winreg_printer_query_binary function.
      s3-spoolss: Migrated winreg to spoolss_create_default_secdesc.
      s3-spoolss: Added winreg security descriptor functions.
      s3-spoolss: Fixed the DeviceMode handling in winreg.
      s3-spoolss: Create default DsSpooler values.
      talloc: Documented the missing string functions.
      talloc: Fixed a doxygen problem with PRINTF_ATTRIBUTE.
      tevent: Fixed a doxygen problem with PRINTF_ATTRIBUTE.
      tevent: Added an introduction to the tevent_queue tutorial.
      tevent: Added a description for tevent queue.
      s3-spoolss: Sorted the builtin forms alphabetically.
      s3-spoolss: Added EN ISO 216, A0 and A1 to builtin forms.
      s3-spoolss: Use better names for set_last_from_to.
      s3-spoolss: Create a spoolss_map_to_os2_driver function.
      s3-spoolss: Use the spoolss_map_to_os2_driver to modify drivername.
      s3-spoolss: Added EN ISO 216, A0 and A1 to builtin forms.
      s3-net: Created a migration tool for printing TDBs.
      s4-torture: Try to fix the winreg tests.
      s4-torture: Disable the security descriptor tests.
      s4-torture: Improved the winreg symlink test.
      s3-auth: Added a function to get the server_info from the system user.
      s3-waf: Fixed dependencies of the the avahi subsystem.
      s3-smbd: Remove unneeded dependency of map_username to globals.c.
      s3-auth: Moved smbd user functions to a generic place.
      s3-rpc: Seperate rpc_srv_register for plain connection.
      s3-rpc: Create a file with all functions for a internal named pipe.
      s3-waf: Build rpc_server/srv_spoolss_util.c too.
      s3-winbind: Fixed setting default sequence number.
      s3:misc make use of server_[event/messaging]_context directly
      s3-spoolss: Provide a memory context for clean_up_driver_struct().
      s3-tdb: Added missing out of memory check in rename_file_with_suffix().
      wbinfo: Document the deprecated sequence option correctly.
      doc: Remove the documentation of the sequence command of wbinfo.
      s3-registry: Added a db upgrade function to normalize the key delimiter.
      s3-registry: Convert registry key delimiter from slash to backslash.
      nss_wrapper: Fixed a possible NULL pointer problem.
      librpc: Use switch in GUID_from_data_blob().
      s3-passdb: Make sure that we don't assign garbage.
      s3-libsmb: Make sure that finfo is initialized.
      s3-nmbd: Leave the sync function if there are no syncs.
      s3-lanman: Make sure that job_info is not undefined.
      s3-passdb: Make sure we don't call free on a garbage pointer.
      s3-passdb: Make sure dn is initialized and don't free it.
      s3-vfs: Make sure that retval isn't used uninitialized.
      s3-lanman: Make sure count is not used uninitialized if we jump to out.
      s3-smbd: Make sure that status is initialized when used.
      s3-registry: Fixed keyname delimiter in KEY_CURRENT_VERSION_NORM.
      s3-eventlog: Fixed the keyname delimiter for the registry key.
      s3-net: Make sure that the data blob is initialized.
      s3-librpc: Fixed GUID_from_data_blob() with length of 32.
      s3-net: Use talloc_asprintf and return if file is in wrong format.
      s3-net: Make sure we don't call free on garbage.
      s3-winbind: Make sure we crash if domain is really not found.
      s3-client: Make sure we only write to an opened file.
      libcli: Fixed a build warning for a missing prototype.
      s3-winbind: Free some memory which isn't needed anymore.
      s3-rpc_client: Use the right memory context for array elements.
      s3-winbind: Initialize the server_info on winbindd start.
      s3-winbind: Added a skeleton for samr based functions.
      s3-winbind: Implemented samr backend function sam_query_user_list.
      s3-winbind: Implemented samr backend function sam_enum_dom_groups.
      s3-winbind: Implemented samr backend function sam_query_user.
      s3-winbind: Implemented samr backend function sam_trusted_domains.
      s3-winbind: Implemented samr backend function sam_lookup_groupmem.
      s3-winbind: Implemented samr backend function common_enum_local_groups.
      s3-winbind: Implemented samr backend function common_name_to_sid.
      s3-winbind: Implemented samr backend function common_sid_to_name.
      s3-winbind: Implemented samr backend function common_rids_to_names.
      s3-winbind: Implemented samr backend function common_lockout_policy.
      s3-winbind: Implemented samr backend function common_password_policy.
      s3-winbind: Implemented samr backend function common_lookup_usergroups.
      s3-winbind: Implemented samr backend function common_lookup_useraliases.
      s3-winbind: Implemented samr backend function common_sequence_number.
      s3-winbind: Replace the passdb backend with a samr/lsa based backend.
      s3-winbind: Rename winbindd_rpc.c to winbindd_msrpc.c.
      s3-winbind: Added a common rpc_enum_dom_groups function.
      s3-winbind: Use rpc_enum_dom_groups in msrpc.
      s3-winbind: Use rpc_enum_dom_groups in samr.
      s3-winbind: Added a common rpc_query_user_list function.
      s3-winbind: Use rpc_query_user_list in msrpc.
      s3-winbind: Use rpc_query_user_list in samr.
      s3-winbind: Added a common rpc_enum_local_groups function.
      s3-winbind: Use rpc_enum_local_groups in msrpc.
      s3-winbind: Use rpc_enum_local_groups in samr.
      s3-winbind: Added a common rpc_name_to_sid function.
      s3-winbind: Use rpc_name_to_sid in samr.
      s3-winbind: Added a common rpc_sid_to_name function.
      s3-winbind: Use rpc_sid_to_name in samr.
      s3-winbind: Added a common rpc_rids_to_names function.
      s3-winbind: Use rpc_rids_to_names in samr.
      s3-winbind: Added a common rpc_query_user function.
      s3-winbind: Use rpc_query_user in msrpc.
      s3-winbind: Use rpc_query_user in samr.
      s3-winbind: Added a common rpc_lookup_usergroups function.
      s3-winbind: Use rpc_lookup_usergroups in samr.
      s3-winbind: Use rpc_lookup_usergroups in msrpc.
      s3-winbind: Added a common rpc_lookup_useraliases function.
      s3-winbind: Use rpc_lookup_useraliases in samr.
      s3-winbind: Use rpc_lookup_useraliases in msrpc.
      s3-winbind: Added a common rpc_lookup_groupmem function.
      s3-winbind: Use rpc_lookup_groupmem in samr.
      s3-winbind: Added a common rpc_sequence_number function.
      s3-winbind: Use rpc_sequence_number in samr.
      s3-winbind: Use rpc_sequence_number in msrpc.
      s3-winbind: Rename common_lockout_policy to sam_lockout_policy.
      s3-winbind: Rename common_password_policy to sam_password_policy.
      s3-winbind: Added a common rpc_trusted_domains function.
      s3-winbind: Use rpc_trusted_domains in samr.
      s3-winbind: Use rpc_trusted_domains in msrpc.
      s3-winbind: Rename lookup_groupmem to msrpc_lookup_groupmem.
      s3-winbind: Create all logfiles in the same directory.
      s3-winbind: Make sure we close all policy handles in sam.
      s3-winbind: Make sure that the policy handles are closed.
      s3-winbind: Fixed debug messages of open_internal_lsa_pipe().
      s3-winbind: Use same format for all msrpc debug messages.
      s3-winbind: Handle aliases in rpc_lookup_groupmem().
      s3-build: Add a gdbtestenv environment for Samba3.
      s3-winbind: Set status before we leave in some msrpc functions.
      s3-winbind: Don't cache queries to builtin and own sam domain.
      s3-waf: Fixed the build.
      s3-rpc_client: Fixed a segfault in rpccli_samr_chng_pswd_auth_crap().
      s3-rpc_server: Don't register the same rpc commands twice.
      s3-rpc_server: Added callbacks for init and shutdown of a rpc service.
      s4-torture: Disable setting REG_BINARY printer data with size 0.
      s3-registry: Init all needed registry keys for printing.
      s3-registry: Redirect KEY_CONTROL_PRINTERS to KEY_WINNT_PRINTERS.
      s3-spoolss: Migrated spoolss_SetPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_GetPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumPrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumPrinterKey to the winreg functions.
      s3-spoolss: Migrated spoolss_DeletePrinterDataEx to the winreg functions.
      s3-spoolss: Migrated spoolss_DeletePrinterKey to the winreg functions.
      s3-spoolss: Migrated spoolss_EnumForms to the winreg function.
      s3-spoolss: Migrated spoolss_AddForm to the winreg function.
      s3-spoolss: Migrated spoolss_DeleteForm to the winreg function.
      s3-spoolss: Migrated spoolss_SetForm to the winreg function.
      s3-spoolss: Migrated spoolss_GetForm to the winreg function.
      s3-spoolss: Migrated spoolss_Forms to use the winreg changeid function.
      s3-spoolss: Migrated spoolss_AddPrinter and spoolss_SetPrinter.
      s3-spoolss: Removed unused function convert_printer_info().
      s3-spoolss: Removed unused function printer_info2_to_nt_printer_info2().
      s3-spoolss: Migrated spoolss_OpenPrinter to create defaults with winreg_create_printer.
      s3-spoolss: Migrated spoolss_GetPrinter and spoolss_EnumPrinters to winreg_update_printer.
      s3-spoolss: Migrated spoolss_DeletePrinter to cleanup winreg keys.
      s3-spoolss: Set c_setprinter always to 0.
      s3-spoolss: Fixed the driver unc strings for dependent files.
      s3-spoolss: Don't return the printer devicemode in spoolss_EnumJobs.
      s3-spoolss: Use the existing memory context for winreg_get_printer.
      s3-spoolss: Use a temporary talloc context in update_printer.
      s3-spoolss: Create and update DsSpooler values.
      s3-spoolss: Removed the last free_a_printer() call in spoolss_nt.c.
      s3-spoolss: Moved shared printing functions to nt_printing.h
      s3-spoolss: Removed wrong comment.
      s3-printing: Removed unused get_a_printer functions.
      s3-printing: Removed unused mod_a_printer functions.
      s3-printing: Removed unused free_a_printer function.
      s3-printing: Removed unsuded c_setprinter functions.
      s3-printing: Removed unused nt_forms.
      s3-printing: Removed unused security descriptor functions.
      s3-printing: Remove unused printer registry key functions.
      s3-printing: Moved remaining prototypes to nt_printing.h.
      s3-spoolss: Create winprint print processor key.
      Revert "s4-smbtorture: skip driverName and printerName DsSpooler tests for now."
      s3-printing: Move all tdb upgrade functions to a separate file.
      s3-printing: Added automatic migration of printing tdbs.
      s4-torture: Enable tests with keynames including a slash.
      s3-spoolss: Remove unused MAGIC_DISPLAY_FREQUENCY
      s3-spoolss: Remove the program global current_user_info.
      s3-lib: Make the standard_mapping parameter const.
      s3-spoolss: Move the standard mappings to spoolss.
      s3-printing: Added automatic migration of printing tdbs.
      s3-spoolss: Correctly set the default values.
      s3-spoolss: Fixed FILL_DRIVER_STRING leading to wrong results.
      s3-lib: Remove redefinition of RL_COMPLETION_CAST.
      pidl: Use struct pipes_struct.
      s3-rpc_server: Use struct pipes_struct.
      s3-dfs: Use struct pipes_struct.
      s3-dssetup: Use struct pipes_struct.
      s3-echo: Use struct pipes_struct.
      s3-eventlog: Use struct pipes_struct.
      s3-initshutdown: Use struct pipes_struct.
      s3-lsa: Use struct pipes_struct.
      s3-netlogon: Use struct pipes_struct.
      s3-ntsvcs: Use struct pipes_struct.
      s3-rpc_pipe: Use struct pipes_struct.
      s3-samr: Use struct pipes_struct.
      s3-spoolss: Use struct pipes_struct.
      s3-srvsvc: Use struct pipes_struct.
      s3-svcctl: Use struct pipes_struct.
      s3-winreg: Use struct pipes_struct.
      s3-wkssvc: Use struct pipes_struct.
      s3-uid: Use struct pipes_struct.
      s3-winbind: Use struct pipes_struct.
      s3-include: Use struct pipes struct and get rid of the typedef.
      s3-rpc: Use struct pipes_struct.

Andrew Bartlett (260):
      and we move on towards Samba4 alpha12!
      Merge remote branch 'origin/master' into alpha11release
      s4:provision Just 'do the right thing' with empty smb.conf files
      s4:provision Be more polite to long-suffering Samba testers.
      s4:param Modify secrets_get_domain_sid to give more useful errors
      s4:winbind Make the 'no SID found' message even more detailed
      s4:rpc_server Record the remote connections association group ID
      misc.idl:  Add reference to the slightly odd representation of if_version
      s4:selftest Add infrastructure for testing against an RPC proxy
      s4:selftest Add test for the RPC proxy
      librpc When sending endpoint mapper requests, include the minor if_version
      s4:rpc_server Add a 'if_version' parameter to the bind operation.
      s4:credentials Add hooks to extract a named Kerberos credentials cache
      librpc/ndr Remove unused macros
      s4:scripting/devel Allow tmpfs script to be re-run
      s4:install Fix bug #7149 reported by JHT.
      s4:ldb Fix segfault in ldbsearch store_referral callback
      s4:python Add bindings to set GENSEC flags on credentials in python
      s4/rpc_server Don't segfault over replPropertyMetaData contents
      Move prototype to header of common code for set_sockaddr_port
      s4:lib/socket Add function to set a port on the socket address
      s4:libcli/resolve Use a more robust way to return the string address
      s4:lib/socket Don't go via a string when resolving addresses in connect_multi
      s4:samba_dnsupdate Add a 'file based' mode to samba_dnsupdate
      libcli/nbt Add parser for a 'hosts' file that takes DNS record types
      s4:libcli/resovle File based lookup module for DNS name types
      s4:libcli Use integrated name resolution when connecting SMB
      s4:provision Improve the handling of provision errors
      Explain why we don't use certain characters in the generated pw
      selftest: Remove dns_host_file every time we start
      s4:selftest Add file based DNS resolver to selftest environment
      s4:dsdb Don't error out if we can't get the Aggregate schema DN yet
      s4:dsdb Add a memory context for dsdb_get_schema()
      s4:dsdb/acl Reduce calls to dsdb_get_schema() and add memory context
      s4:dsdb Fix warnings in DEBUG() by casting to unsigned long int
      s4:dsdb Change dsdb_get_schema() callers to use new talloc argument
      s4:dsdb Show more detail in failure to compute the aggregate DN.
      s4:dsdb Move rdn_name down the stack
      s4:dsdb Don't load the schema unconditionally
      s4:dsdb Add 'const' to some struct dsdb_schema variables
      s4:dsdb Remove unused 'dsdb_make_schema_global' call from pyglue
      s4:schema Expand the schema structure
      s4:dsdb Move dsdb_save_partition_usn() to be a module helper function
      s4:dsdb Rework schema loading and add schema reloading
      s4:dsdb Add a shortcut sequence number for schema reloads
      s4:ntlmssp Ensure that we always negotiate signing if we negotiate sealing.
      s4:cmdline Add --sign and --encrypt options to our common command line
      s4:selftest Test --sign and --encrypt options to ldbsearch
      s4:kdc Add support for changing password of a servicePrincipalName
      s4:selftest Add testing of kpasswd password set on servicePrincipalName
      s4:heimdal: import lorikeet-heimdal-201001120029 (commit a5e675fed7c5db8a7370b77ed0bfa724196aa84d)
      s4:heimdal New files and supporting logic for heimdal update
      s4:testprogs Fix kinit test for updated Heimdal
      s4:heimdal: import lorikeet-heimdal-201003262338 (commit f4e0dc17709829235f057e0e100d34802d3929ff)
      s4:testprogs Update test to match current Heimdal
      s4:heimal Update generated files (cp from Heimdal)
      s4:heimdal_build Remove forced HAVE_STRERROR_R
      s4:heimdal Use correct variable to advance past -- options in kpasswd
      tsocket_bsd: Always use a real length for the sa_socklen, and keep it around
      pidl:python Allow 'nopython' to work
      librpc/idl Use [nopython] on some drsblobs.idl 'functions' as an example
      s4:credentials talloc_free() any previous salt_principal
      s4:credentials Add the functions needed to do S4U2Self with cli_credentials
      s4:heimdal Add hooks to check with the DB before we allow s4u2self
      s4:kdc Add functions to hdb-samba4 for the new s4u2self callback.
      s4:heimdal Create a new PAC when impersonating a user with S4U2Self
      s4:schema Try to fix OpenLDAP backend after schema reload support.
      s4:rpc_server Add all SIDs into the netlogon SamLogon reply
      s4:provision Don't make the 'slaptest' call produce errors
      s4:rpc_server Fix segfault in modified SamLogon handling
      s4:ldif_handlers tokenGroups are SIDs
      s4:dsdb Improve error message in extended_dn_in
      s4:rootdse Implement "tokenGroups" in the rootDSE
      s4:dsdb Don't return operational attributes on special DNs
      s4:dsdb Don't use the permissive modify control on schemaInfo updates
      s4:auth Remove event context from anonymous_session()
      s4:auth Allow the simple 'struct auth_session_info' generator for all users
      s4:auth Change auth_generate_session_info to take an auth context
      s4:provision Pass in the invoication ID and NTDS Settings DN to Schema()
      s4:provisionbackend Print the command we failed to start slapd with
      s4:provision Use more reasonable values for DB_CONFIG
      s4:dsdb Revert accidentilly commited change for LDAP backends
      s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP
      s4:selftest Ensure we don't fsync() all day in the LDAP backend test
      s4:provison Pass nosync in for the OpenLDAP cn=config too
      s4:ldap-backend Fix LSA test failures with OpenLDAP backend - convert SIDs
      s4:provision Make OpenLDAP backend more robust
      s4:provision Remove moduleload for 'hdb' (wrong name).
      s4:kerberos Give a better error message than "Could not allocate memory"
      s4:gensec Use a different form of 'name' in GSSAPI import_name()
      s4:provisionbackend Don't loop forever waiting for OpenLDAP
      s4:howto Improve OpenLDAP backend instructions
      s4:libnet Make 'net vampire' more robust to command line arguments
      s4:dsdb Fix use of memory after free in repl_meta_data
      s4:credentials Make the CCACHE in credentials depend on the things that built it
      s4:dsdb Use replPropertyMetaData as the basis for msDS-KeyVersionNumber
      buildtools: Add 'make testenv' to Samba4 make targets
      s4:dsdb Provide an intelegent fallback if not CN=Subnets is found
      s3:kerberos Return PAC_LOGON_INFO rather than the full PAC_DATA
      s3:auth Make get_ntlm_challenge more like Samba4
      s3:winbindd Remove call to namecache_enable().
      s3:smbd Remove calls to namecache_enable()
      s3:libsmb/namecache Remove namecache_enable()
      s3:winbindd Rename 'children' to 'winbindd_children' and make static
      s3:Winbindd Move winbindd_event_context to a different file
      s3:winbindd Split helper functions to allow s3compat to call them
      s3:winbindd Provide a winbindd_register_handlers() helper function for s3compat
      Revert "s4: remove unused references to swat"
      waf: Make waf handle IDL files from Samba3
      s4:ntvfs Prepare for a possible future sharing of notify.idl
      s4:credentials Allow setting of an empty Kerberos CCACHE
      s4:process_modals Add another process modal - 'onefork'
      s4:process_model Fix process_standard and process_onefork not to use
      s4:winbindd Rework some winbind structures to make s3compat easier
      s4:gensec expose gensec_set_target_principal for use outside GENSEC
      s4:auth Make it clear to the callers the talloc lifetime.
      s4:provision Remove unused 'account_name' parameter
      s4:credentials Add in tracking of the password last set time
      s4:winbindd Record the privilaged pipe dir
      s4:ntvfs Prepare for a possible future sharing of notify.idl
      pidl: Allow new property 'no_srv_register'.
      s3:winbind use no_srv_register to avoid needing rpc_srv_register
      s3:split secrets.c to put machine account secrets in a new file
      s4:dsdb disable tokenGroups until end of rewrite
      s4:auth Move BUILTIN group addition into session.c
      s4:torture Add tests to demonstrate S2U4Self in the RPC-PAC test
      s4:auth Allow the operational module to get a user's tokenGroups from auth
      s4:auth Add dependency from the operational module onto auth
      s4:auth Push check for messaging context into winbind backend
      s4:auth Change auth_generate_session_info to take flags
      s4:auth handle addition of nested aliases of domain groups.
      s4:auth Error out when a memberOf DN does not have a SID
      Revert "Make -k a simple non-bool option."
      s4:auth Fix previous commit - segfault in determinging a user's groups
      s4:auth Remove un-needed headers.
      s4:libcli/ldap Rename ldap.h to libcli_ldap.h
      s3:passdb Remove use of uint8 uint16 and uint32 in favour of C99 types
      s3:dom_sid Global replace of DOM_SID with struct dom_sid
      s4:libcli/ldap Update headermap.txt (autotools build) and wscript_build for libcli_ldap.h
      s4:ntvfs rename notify.idl to s4_notify.idl until we can merge this IDL
      s4:dsdb Allow a NULL search expression in dsdb_search()
      s4:samr Split the guts of samr_CreateUser2 into a helper function
      s4:samr Split most of samr_CreateDomainGroup into a helper function
      s4:samr Move most of samr_CreateDomAlias into a helper function
      s4:samr Push most of samr_QueryGroupMember into a helper function
      s4:samr Push most of samr_LookupRids into a helper function
      s4:idmap Seperate idmap structures from winbind.idl and match to source3/ idmap
      s4:idmap Adjust code to new idmap structure names and layout.
      s4:winbind Fix up includes after seperation of idmap.idl from winbind.idl
      s4:winbind Change include guard so as not to conflict with idmap.h in source3
      s4:winbind Change idmap API to match that used by the source3/ idmap subsystem
      s4:winbind Give more detail on the parameters when reporting idmap failure
      waf Read VERSION file inside WAF to set package version
      s4:kdc Remove special talloc_free of the ldb context
      waf Add DIST_BLACKLIST to list files that we cannot include in a release
      s4:waf Exclude the autotools based build environment from a Samba4 release
      waf Provide release signing capability in 'waf dist'
      s4:build use autotools for mkrelease.sh
      s4:build Don't automatically mark as 'not a git snapshot'.
      s3:smbd split smbd/server.c into smbd/server.c and smbd/server_exit.c
      s3:smbd split reload services/printers functions from server.c
      s3:smbd move messaging_context and memcache into globals.c
      s3:lib split out global workgroup and netbios name functions.
      s3:lib s3:lib move get_global_sam_name to util_names.c
      s3:winbind Kill amusing but un-used winbindd_kill_all_clients
      s3:auth Fix segfault when the user cannot be found by getpwnam()
      s3:auth Make AUTH_NTLMSSP_STATE a private structure.
      s3:auth Remove AUTH_NTLMSSP_STATE typedef.
      s3:ntlmssp Add two unused variables to match the Samba4 ntlmssp.h
      ntlmssp: Make the ntlmssp.h from source3/ a common header
      s3:ntlmssp Use a TALLOC_CTX for ntlmssp_sign_packet() and ntlmssp_seal_packet()
      s3:ntlmssp Move ntlmssp_sign.c from source3 to common code.
      Revert "s3:winbindd Split helper functions to allow s3compat to call them"
      s3:winbind tidy up connecting the winbind sockets.
      s3:winbind Make state->mem_ctx a talloc child of state
      s3:winbindd move reinit_after_fork() back out of winbindd_register_handlers
      s3:param Add helper function to get at Gobals.iDomainMaster
      s3:param Put 'server_role' functions in another file.
      s4:ntlmssp Merge ntlmssp structures with version from source3/
      s4:ntlmssp Use the new common ntlmssp.h
      s4:ntlmssp Use common code for ntlmssp_sign.c
      s3:auth Rename wksta_name -> workstation_name in auth_usersupplied_info
      s3:idmap Use idmap.idl defined structures and constants
      s3:winbind Ensure we always init idmap_passdb before we use it
      s3:auth Rename user_info->smb_name -> user_info->client.account_name
      s3:auth Rename user_info->internal_username -> user_info->mapped.account_name
      s3:auth fix header comment for internal_username -> mapped.account_name
      s3:auth Rename user_info->client_domain -> user_info->client.domain_name
      s3:auth Rename user_info->domain -> user_info->mapped.domain_name
      s3:smbd Fix segfault if register_existing_vuid() fails
      named_pipe_auth Always lower case the incoming pipe name
      s3:smbd Give the kerberos session key a parent
      s3:named pipe proxy Improve error messages when named pipes fail to forward
      s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS
      s3:auth add hooks to indicate if signing or sealing is desired with NTLMSSP
      s4:dsdb Put back the reference and set_attributes in dsdb_reference_schema
      s4:dsdb Add more debugs to help track down failures to parse the prefixmap
      s4:dsdb Provide a function to convert from DRS prefix maps to the LDB prefixmap
      s4:dsdb Allow a binary prefix map to be specified in the LDIF
      s4:provision Allow both additional and override prefixmaps in Schema
      s4:dsdb Simplfy match of objectclass in dsdb_schema_set_el_from_ldb_msg
      s4:dsdb Add debug
      s4:dsdb Allow calling dsdb_convert_object_ex() directly
      s4:libnet Make the libnet_vampire default callbacks non-static
      s4:libnet Steal ldb and lp_ctx from python result into correct structures.
      s4:torture Rework NET-API-BECOMEDC test to use libnet_vampire callbacks.
      s4:dsdb Use the schema from our local provision to decode the schema
      s4:dsdb Allow the setting an override on the schema
      s4:dsdb Keep the DRS-based prefix map for use in provision-based schema
      s4:provision Allow a specific prefix map to be loaded into a new schema provision
      s4:dsdb Rework the vampire schema handling to convert 3 times.
      s4:selftest Remove becomedc tests from knownfail, these should now pass
      s4:selftest Remove unused basedn specification in selftest env setup
      s4:dsdb Add const to dsdb_dn functions that operate on an ldb_val.
      s4:dsdb Move linked attribute restrictions to objectclass_attrs
      s4:dsdb Add control for signaling between repl_meta_data and linked_attributes
      s4:dsdb Handle backlinks for Windows 2000 level linked attributes
      s4:dsdb use dsdb_module_modify() rather than ldb_next_request()
      s4:selftest Add vampire_dc test environment
      s4:provision Allow functional level 2000 to be chosen
      s4:provision Add import for DS_DOMAIN_FUNCTION_2000
      s4:selftest Add test environment for functional level 2000
      s4:dsdb Assert that we can't get backlinks as input in linked_attributes
      s4:dsdb Fix linked_attributes to cope with the Feb 2010 changes to DLIST
      s4:libnet Remove 'ads min function level' checks.
      s4:selftest Change domain name for functional level 2000 DC
      s4:dsdb Allow renames with (now removed) linked attributes
      s4:ldif-handlers Add a custom handler for DNs that knows about deleted values
      s4:kdc Use msDS-SupportedEncTypes in our KDC
      libds:common Remove DS_DC_* domain functionality flags
      s4:libnet When joining a domain, update msDS-SupportedEncryptionTypes
      s4:provision Remove am_rodc from Schema
      s4:provision Raise default max functional level to 2008R2
      s4:net Remove warnings for 2000 native mode and Samba4.
      s4:selftest Add 2003 and 2008R2 test environments and tests
      s4:selftest Change netbios aliases to shorter names.
      s4:selftest For the moment the server role '2008_R2' is case sensitive
      s4:selftest Fix up netbios names for rpc_echo test
      libcli/auth make open_schannel_session_store() public
      s4:schannel Open the schannel_store.tdb at startup
      s3:schannel Open the schannel_state.tdb at startup
      schannel Change to TDB_CLEAR_IF_FIRST to reduce fsync()
      s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC
      s4:libnet_join Fix typo in msDS-SupportedEncryptionTypes
      s4:kerberos Add functions to convert msDS-SupportedEncryptionTypes
      s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDC
      s4:kdc Rework the 'allowed enc types' calculation
      s4:selftest Split out PKINIT tests from test_kinit.sh and test enc types
      s4:secrets Ensure secrets.ldb uses the same hooks as the rest of Samba
      s4:dsdb Fix possible schema segfaults for DRS-replication based schema
      s4:dsdb Ensure we free old schema copies
      s3:smbd Fix segfault if register_existing_vuid() fails
      s3:smbd Give the kerberos session key a parent
      s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS
      s4:testprogs Prove kerberos still works after a password change
      s4:pyldb Fix memory handling for ldb_message_element
      s4:pyldb whitespace fix
      s4:provision Handle machine account password changes while keeping keytab
      s4:testprogs Show that we no longer delete the old keytab entries
      s4:testprogs Operate the blackbox kinit and net tests using the :local config

Andrew Kroeger (1):
      s4:provision: Make gc._msdcs DNS entries A/AAAA records

Andrew Tridgell (948):
      s4-idl: update the DRS_OPTIONS bits based on the latest WSPP docs
      s4-drepl: switch drepl over to using the generic DRS options flags
      s4-torture: switch to generic DRS options flags
      s4-drs: switch the DRS server to the generic DRS options flags
      s4-torture: switch smbtorture to the generic DRS options
      s4-idl: get rid of the operation specific DRS options flags
      s4-ldb: cope with bad ptr alignment in ldb_index.c
      s4-dsdb: added isGlobalCatalogReady
      s4-drs: give better debug info on unsupported DRS calls
      s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS infoType.
      s4-dsdb: require admin access for DsReplicaGetInfo
      s4-drs: better debug info when security checks fail
      s4-kcc: squash a warning
      s4-kcc: simplify the ReplicaGetInfo implementation a bit
      s4-dsdb: added dsdb_load_udv_v2() and dsdb_load_udv_v1()
      s4-dsdb: use dsdb_load_udv_v2() in repl task
      s4-drs: use dsdb_load_udv_v2() in getncchanges code
      s4-dsdb: add our local cursor and sort in dsdb_load_udv_*()
      s4-dsdb: take advantage of local cursor and sort
      s4-kcc: added support for CURSORS info level in DsReplicaGetInfo
      s4-idl: in DsReplicaGetInfo unknown2 is actually an enumeration_context
      s4-kcc: added DsReplicaGetInfo CURSORS2 level
      s4-provision: added "check-names ignore;" to allow for _msdcs A records
      s4-devel: added rebuild_zone.sh
      s4-provision: added w2k8r2 ldap capabilities
      s4-kcc: added DsReplicaGetInfo pending ops call
      s4-torture: fixed DsReplicaGetInfo elements
      s4-kerberos: raise the general kerberos debug level to 3
      s4-dsdb: isGlobalCatalogReady should be shown by default
      s4-drs: allow for security bypass for DsReplicaGetInfo
      idl: switched to using the WSPP names for the 'neighbour' DRS options
      s4-ldbtest: fixed python import
      s4-torture: handle NT_STATUS_CONNECTION_RESET
      s4-ldb: fixed api.py selftest
      s3-brlock: add a minimim retry time for pending blocking locks
      s3-brlock: we don't need these MSG_SMB_UNLOCK calls now
      s3-smbd: add a rate limited cleanup of brl, connections and locking db
      s3-events: make the old timed events compatible with tevent
      s4-registry: fixed byte order assumptions
      talloc: fixed doc typo
      nbt: don't reference the event_ctx in nbtsock
      s4-torture: more useful error message in SMB2-DIR
      s4-torture: allow host-only in unc lists in smbtorture
      s4-ldb: update ldb_tdb to use new DLIST_ macros
      s3-nmbd: update nmbd to use new DLIST_ macros
      s3-ldb: update the old ldb in s3 to use new DLIST macros
      s3-memcache: update memcache to use new DLIST macros
      s3-libsmb: update libsmb to use new DLIST macros
      s3-locking: update to use DLIST_ADD_AFTER()
      s3-perfcount: update to use new DLIST macros
      s3-registry: update to use new DLIST macros
      s3-smbd: update to use new DLIST macros
      util: rewrite dlinklist.h so that DLIST_ADD_END() is O(1)
      test:local added LOCAL-DLINKLIST testsuite
      s4-provision: move zone file to dns subdirectory
      s4-provision: pre-create a named.conf.update file
      libreplace: added replacements for dprintf() and vdprintf()
      util: added file_compare() utility function
      s4-provision: cope with umask in creating private/dns
      s4-dns: added a dns update task
      s4-selftest: don't run rndc reload in selftest
      s4-dns: don't leave behind a tmp file
      s4-net-drs: fix some coding style issues
      libds: added recyclebin feature GUID
      s4-pyldb: null terminate string ldb message elements from python
      s4-script: make enablerecyclebin use system_session
      s4-provision: fixed --function-level option to provision
      s4-build: avoid finding python symlinks
      s4-provision: import the R2 functional level
      util: added TYPESAFE_QSORT() macro
      libreplace: add fdatasync() if not available
      tdb: use fdatasync() instead of fsync() in transactions
      s4-dsdb: use TYPESAFE_QSORT() in dsdb code
      s4-auth: use TYPESAFE_QSORT() in gensec
      s4-socket: use TYPESAFE_QSORT() in netif code
      s4-ntvfs: use TYPESAFE_QSORT() in notify code
      s4-rpcserver: use TYPESAFE_QSORT() in rpc servers
      s4-torture: use TYPESAFE_QSORT() in smbtorture
      s4-wrepl: use TYPESAFE_QSORT() in wins repl code
      s4-ldb: added LDB_TYPESAFE_QSORT()
      s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort()
      s4-rpc: be more careful about DCERPC auth padding
      s4-smbd: fix crash in notify code on client termination
      s4-ldb: use TYPESAFE_QSORT() in the rest of the ldb code
      s3-includes: enable TYPESAFE_QSORT() in s3
      lib: use TYPESAFE_QSORT() in lib/ and libcli/
      s3-lib: use TYPESAFE_QSORT() in s3 interfaces code
      s3-libsmb: use TYPESAFE_QSORT() in namequery code
      s3-lib: use TYPESAFE_QSORT() in remaining s3 library code
      s3-vfs: use TYPESAFE_QSORT() in s3 VFS modules
      s3-nmbd: note TODO item for qsort
      s3: convert registry and printing code to TYPESAFE_QSORT()
      s3-locking: convert brlock to TYPESAFE_QSORT()
      s3-rpc: convert wkssvc to use TYPESAFE_QSORT()
      s3-smbd: convert lanman and notify code to TYPESAFE_QSORT()
      s3: last part of TYPESAFE_QSORT() conversion
      util: update three other copies of our dlinklist.h macros
      a4-dcerpc: another attempt at dcerpc auth padding
      s4-rpcserver: teach the rpc server to cope with bad sig_size estimates
      s4-dsdb: added dsdb_modify_permissive()
      s4-drs: use a permissive modify in addentry
      s4-drs: replace manual checks with dsdb_modify_permissive()
      s4-test: minor fixes to urgent_replication.py
      s4-ldb: fixed permissions on urgent_replication.py
      s4-test: use local ldb for urgent_replication test
      s4-dsdb: don't change replPropertyMetaData if the value hasn't changed
      s4-kcc: remove C++ comment
      s4-rootdse: we don't need DSDB_FLAG_OWN_MODULE here
      s4-dsdb: move dsdb_request_add_controls() into dsdb/common/util.c
      s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags
      s4-dsdb: change samdb_replace() to dsdb_replace() and allow for dsdb_flags
      s4-dsdb: change dsdb_search_dn_with_deleted() to dsdb_search_dn() with dsdb_flags
      s4-dsdb: replace dsdb_find_dn_by_guid() with a dsdb_search() call
      s4-dsdb: added dsdb_search_one() and cleanup dsdb_find_dn_by_guid()
      s4-dsdb: removed gendb_search_single_extended_dn()
      s4-kcc: remove search_onelevel_with_deleted() in kcc
      s4-samdb: use dsdb_search() in cracknames
      s4-dsdb: return LDB_ERR_CONSTRAINT_VIOLATION on num_recs != 1
      s4-dcerpc: fixed auth padding to be relative to the stub, not packet
      s4-rpc: don't use auth padding in rpc bind requests as it breaks s3
      s4-kcc: remove a qsort() that snuck into the new topology code
      s4-rpc: paranoid check for auth_length
      s4-provision: fix permissions on generated DNS zone file
      examples: add bind9 patches for TSIG-GSS support
      util: added samba_runcmd()
      s4-param: added "rndc command" smb.conf option
      s4-dnsupdate: use samba_runcmd() in the dns update task
      s4-provision: freeze the DNS zone before creating the zone file
      s4-config: add dyn_SBINDIR
      s4-param: added "dns update command" smb.conf option
      s4-dns: call out to the dns update command every 10 minutes
      s4-pyglue: added interface_ips() call
      s4-dns: improved logging, and run name check at startup
      s4-selftest: disable rndc and dns update in build farm
      Revert "s4:AD content - adequate some revision levels to match Windows Server 2008"
      s4-dsdb: fixed the fetch of the server site name
      dns: dummy samba_dnsupdate script
      dns: install samba_dnsupdate
      s4-krb5: propogate errors from a lot more kerberos functions
      pyglue: don't return IPs in interface_ips()
      pyglue: added py_samdb_ntds_invocation_id()
      py-samdb: added get_invocation_id() method
      pyglue: added py_samdb_server_site_name()
      py-samdb: added server_site_name method
      samdb: added get_ntds_GUID() method
      s4-param: added 'nsupdate command' option, default to /usr/bin/nsupdate -g
      s4-provision: fixed port number for gc ldap DNS SRV entry
      s4-dns: add automatic dynamic DNS updating script
      dns: auto-delete incorrect SRV entries for our hostname
      s4-provision: if we aren't doing variable substitution then don't check for vars
      s4-provision: setup the dns_update_list at provision time
      s4-provision: added dns_update_list
      s4-dns: use a loadparm list for samba_runcmd() commands
      s4-dns: fixed CNAME automatic DNS updates
      s4-provision: also create the dns_update_list when running net vampire
      s4-provision: fixed use of rndc command from python
      devel: get the ownership of the directories right in tmpfs.sh
      s4-posix: allow change ownership of files if the user has the right privileges
      dns: make dns update script use unbuffered IO
      s4-messaging: use auto-close on the socket
      s4-dns-ex: use autoclose on the dns child pipe
      s4-python: allow us to have samba copies of python libraries we depend on
      s4-dns: use samba.external to pull in the dns.resolver library
      s4-python: import a copy of the python dns library
      s4-python: only install external python libs that are missing
      s4-torture: fixed commas separating C statements
      s4-rpc: don't use s->credentials after it is freed
      s4-pvfs: move the private ntcreatex flags to private_flags
      s4-pvfs: log more error conditions in NTVFS backend
      s4-privs: add root_privileges_original_uid()
      s4-pvfs: added new pvfs flag PVFS_FLAG_PERM_OVERRIDE
      s4-pvfs: new pvfs_sys module
      s4-pvfs: use pvfs_sys_*() functions to wrap posix calls
      replace: added get_current_dir_name()
      s4-pvfs: use O_FOLLOW one level at a time for security overrides
      s4-pvfs: set default for perm override based on system features
      s4-pvfs: use pvfs_sys_fchmod()
      s4-pvfs_sys: talloc_free should be before errno restore
      s4-pvfs_sys: build on systems without O_NOFOLLOW or O_DIRECTORY
      charset: fixed a problem with the global use of the iconv_convenience structure
      subunit: keep total error and failure counts
      subunit: fixed reporting of unexpected failures
      build: useful shell vars for setting up selftest
      build: fixed nss_wrapper on solaris
      s4-provision: solaris uses the group "other"
      s4-provision: FreeBSD uses 'staff' for users
      libreplace: fixed declaration of dprintf() on FreeBSD
      python: use '#!/usr/bin/env python' to cope with varying install locations
      s4-ldb: removed unused command line options -I and -O
      s4-ldb: fixed command line parsing in oLschema2ldif
      tsocket: not all systems have IPV6_V6ONLY
      libreplace: strerror_r() is needed by heimdal on solaris8
      libutil: moved the networking defines to util_net.h
      util: on FreeBSD true is in /usr/bin. Use execvp to find it
      tevent: added tevent_re_initialise()
      s4-smbd: use tevent_re_initialise()
      s3-event: switch s3 to using tevent_re_initialise()
      s4-selftest: use CONFIG_H environment variable to find config.h
      s4: added a simple implementation of bin/samba -b
      talloc: testsuite should use <talloc.h> not "talloc.h"
      pytalloc: allow for using a system libtalloc-dev with pytalloc
      s4-waf: use the libreplace strerror_r if needed
      s4-heimdal: a better way of handling dirfd()
      charset: look for the codepages in the right place
      s4-heimdal: for use of libreplace setegid and seteuid
      s4-heimdal: use the HAVE_INET_* functions from libreplace
      s4-test: oLschema2ldif doesn't take -H any more
      selftest: reason may be None
      replace: allow memmem() with an empty string to return NULL
      s4-torture: using typeof() is not portable
      s4-torture: removed more uses of typeof()
      talloc: limit the depth that talloc will go for talloc_is_parent()
      talloc: change talloc minor version to 2.0.2
      talloc: add a define for TALLOC_MAX_DEPTH
      talloc: a useful bit of debug code
      debug: enable talloc logging
      pyrpc: do the pipe connect on a real memory context
      s4-pyglue: setup talloc logging in python modules
      s4-python: added --debuglevel to our python scripts
      s4-rpc: fixed a talloc loop in continue_ntlmssp_connection()
      socket-wrapper: not all systems have FIONREAD defined
      build: a first attempt at waf build for talloc and libreplace
      build: updates to waf scripts for replace and talloc
      build: renamed autoconf.py to wafsamba.py and added SAMBA_*() functions
      build: added waf build for tdb
      build: more binaries for waf tdb build
      build: added some comments for tdb build
      build: added waf to the tree, so everyone uses the same version
      build: neater way to find libreplace and start on tevent waf build
      build: added target directory options
      build: added recursive library handling
      build: some more config checks
      build: added waf build rules for ldb
      build: tdb does not depend on talloc
      build: moved lib -> shared
      build: SAMBA_BUILD_ENV() is now in conf.*
      build: added ADD_CFLAGS() and started of Samba4 build
      build: first attempt at a script to auto-convert config.mk files to wscript
      build: add dummy flags for auto-generated scripts
      build: s4 wants config.h in include/
      build: more developer flags
      build: allow override of config.h location
      build: put config.h in top dir by default
      build: added top level script
      build: LIBLDB alias
      build: added autoproto stub
      build: recognise manpages keyword
      build: added BUILD_SUBDIR() wrapper
      build: added public_headers support
      build: use runonce for config checks
      build: more header checks
      build: simpler BUILD_SUBDIR
      build: death to singletons
      build: check for circular build dependencies
      build: auto-remove circular dependencies
      build: improve the wscript generator
      build: on the fly dependency checking
      build: LIBLDB hack not needed any more
      build: fixed handling of heimdal_build/internal.mk
      build: add libresolv
      build: add heimdal_build
      build: don't distinguish system and local libs in wscript files
      build: added LIBREPLACE_NETWORK
      build: auto-strip empty dependencies
      build: auto generate ASN1 and ET rules
      build: added ASN1 and ERRTABLE build targets
      build: run the lib/replace rules first
      build: add LIBREPLACE_EXT
      build: added gettext/libintl to libreplace
      build: make CHECK_FUNCS_IN() smarter about mandatory libraries
      build: heimdal_build waf support
      build: DEFUN->DEFINE, and fixed CFLAGS handling
      build: recursive dependency calculation
      build: added build groups
      build: added svn version of waf. It has better exception display
      build: added ASN1, PIDL and ET build rules
      build: cope with empty source lists for libs
      build: moved wafsamba.py to buildtools
      build: aded wafsamba README
      build: started to split up wafsamba.py into separate modules
      build: add output_type and realname for mit_samba library
      build: another missing subsystem .....
      build: split out the extension based build patterns
      build: fixed --includedir options for PIDL
      build: added librpc build script
      build: dynconfig build rules
      build: mail IDL build rules
      build: fixed location of gen_ndr files
      build: rewrote PIDL rules, breaking them into a separate waf tool
      build: using deps= for deps is clearer
      build: source= is clearer for source lists
      build: fixed formatting
      build: fixes from ita
      build: added heimdal_build table rules
      build: add README to explain gen_ndr, and ensure directory exists
      build: result of hack session with ita
      build: use shell for TDR rule, as -- confuses the build rule
      build: allow selection of build group in HEIMDAL_AUTOPROTO()
      build: moved main autoproto rule into samba_autoproto.py
      build: a useful example of a debug technique in waf
      build: added generation of version.h
      useful tools for finding missing configure steps
      build: check for pkgconfig
      build: waf build for lib/tls
      build: added define and always options to CHECK_VARIABLE()
      build: more headers and variables in configure
      build: h_errno for heimdal
      build: ignore the bin/ directory
      build: useful test script
      build: ignore some waf files
      build: add_headers flag to CHECK_HEADER()
      build: ntvfs/sysdep configure checks
      build: another typo
      build: check for backtrace
      build: return values for autoconf-like tests
      build: backtrace and crypt tests
      build: added CHECK_DECLS()
      build: improve autoconf macros
      build: smarter list splitting
      build: added CHECK_SIZEOF()
      build: check signal functions
      build: check size of types
      build: check for offset_t and pw*_r functions
      build: more config checks
      build: check for volatile
      build: added help on fns
      build: check xattr and frsize
      build: check freeaddrinfo
      build: added CHECK_CODE_COMPILES()
      build: more config checks
      build: expand CHECK_CODE() function
      build: added interface checking and nicer snprintf checking
      build: gcrypt functions
      build: move gettimeofday check to libreplace
      build: check immediate structures
      build: fixed iuserok test
      build: zlib checks
      build: define HAVE_LIBxxx when we find a library
      build: check for pam
      build: check for libgpg-error
      build: fix name of libs with - in them
      build: check for libsasl2
      build: new waf version
      build: added CHECK_CFLAGS()
      build: more libreplace config checks
      build: fixed winsize check
      build: check for xattr support
      build: fixed cflags in CHECK_CODE()
      build: iconv checks
      build: fixed sockaddr_in6 test
      build: new waf version - fixes mkstemp problem
      build: fixed _Bool va_copy and VA_ARGS tests
      build: added IPV6 test
      build: check for RETSIGTYPE
      build: added wrapper options
      build: added local_include option to CHECK_CODE()
      build: added statvfs64 test
      build: emulate autoconf PACKAGE_* variables
      build: fixed LDB_MODULESDIR
      build: added SUBST_ENV_VAR()
      build: make CONFIG_PATH() understand absolute paths
      build: added getpass() tests
      build: added ENFORCE_GROUP_ORDERING()
      build: back to stricter deps
      build: enable ENFORCE_GROUP_ORDERING()
      build: saner CFLAGS handling for defines
      build: fixed heimdal include lists
      build: use export_incdirs
      build: much nicer pidl rules
      build: assert on missing dependency
      build: better target name for lib link
      build: nearly there on samba4 build
      build: separate out dependencies and python rules
      build: commit all the waf build files in the tree
      build: waf quicktest nearly works
      build: waf test now works (at least for some tests)
      build: need the sample ldb module for our testsuite
      build: waf test now depends on build
      build: added ldb 'skel' module
      build: fixed group for heimdal autoproto
      build: added test targets for make
      build: default to waf -p
      build: fixed cflags in CHECK_CODE
      build: use a plain build, at request of metze :)
      build: fixed termcap build
      build: fixed samba_deps.py for python 2.4
      build: updates for current master build
      build: cope with the common gen_ndr files being in the git tree
      build: allow shared and python staging areas to be referenced in build tree
      build: check that the symlink doesn't exist before creating
      build: fixed the build without sasl libraries
      build: updated waf version
      build: more efficient pidl rules from ita
      build: try faster includes processing
      build: allow waf to cache include lists more efficiently
      build: an optimisation for includes file handling
      build: remove hacks from top level wscript
      build: we don't need varients in samba, so we can optimise a bit more
      build: fixed init function sentinal for python modules
      build: added a lot more options to waf test
      build: fixed some more missing targets
      build: go into system includes for dependencies on configure
      build: allow configure -C to work again
      build: removed unused file
      build: don't use -W warning option for developer build
      build: optionally enable builtin popt
      build: enable pytdb
      build: don't remove Makefile
      build: enable com library
      build: added a cflags_end SAMBA_SUBSYSTEM() option
      build: fixed the build of the com.so library
      build: only enable pytdb on s4 build
      build: teach samba_pild.py about the --com-header and --dcom-proxy options
      build: don't need the S4 in the PIDL prefix
      build: added 'waf etags' target
      build: alias the libiconv target name for subsystems that depend on 'ICONV'
      build: compatibility makefile targets
      build: disable WAFCACHE by default
      build: new waf version (fixed python install bug)
      build: cleanup the ASN1 rules a bit
      build: split build and install libraries/binaries
      build: fixed the install name for python modules
      build: ensure that the 'build' command appears in waf --help
      build: fixed config.h generation when we have source -> source4 symlink
      build: default to 1 job in make, to be build farm friendly
      build: fixed st_done test completion code
      build: python modules need the libs from broken lib loops too
      build: make bin/sambadeps depend on samba_deps.py modtime
      build: trim whitespace from CC options
      build: use RUN_COMMAND() to wrap os.system()
      build: fixed git version in samba -V
      build: don't default to WAFCACHE in configure
      build: install codepage files
      build: more optimisations from Thomas
      build: rename samba_includes.py to samba_optimisation.py
      build: updated waf-svn (lower preproc recursion limit)
      build: added SUBST_VARS_RECURSIVE()
      build: use SUBST_VARS_RECURSIVE() for install_path
      build: fixed includes paths for CHECK_CODE()
      build: don't install talloc_testsuite and ldbtest
      build: don't install the heimdal compilers
      build: install samba in sbin
      build: added --enable-gccdeps option
      build: tool to find missing install components
      build: check for pam headers
      build: conditionally enable inotify
      build: spelling fix, and syntax highlighting fix
      build: don't assume bash in configure.waf
      build: added WORDS_BIGENDIAN test
      build: gccdeps fixes from ita
      build: also need to put stripped CC in conf.env
      build: fixed REPLACE_GETPASS
      build: check libc first for several libraries
      build: don't add curses.h to incremental confdefs.h
      build: more non-incremental headers
      build: these cause problems incrementally too
      build: don't look for gettext twice
      build: cope with multiple checks for the same function/library
      build: cope with multiple libs in CHECK_FUNCS_IN()
      build: ensure all libs in CHECK_FUNCS_IN() get a target type
      build: lib needs to take a list when more than 1
      build: inet_n*() are normally in libc
      build: libreplace now depends on nsl and socket
      build: compile_et needs lib/com_err includes
      build: cope with double check for functions
      build: more functions that are in -lsocket -lnsl on some systems
      build: CONFIG_SET() takes conf argument
      build: more careful library list handling
      build: fixed check for pthread_create()
      build: fixed gnutls check
      build: don't use gcc warnings during configure
      build: if a library is found, but not the fn, still define the library
      build: fixed ifaddrs.h for heimdal (from template)
      build: tevent_epoll.c is conditional on HAVE_EPOLL
      build: 'makefile' (lowercase) is now a generated file
      build: cope with subsystems with no enabled modules
      build: removed testing cflags
      build: support systems without rpath
      build: fixed issue with CC="ccache cc" on solaris
      build: fixed libcli/ndr_netlogon.c dependency rules
      build: commented the missing subsystems
      build: optimise and re-enable check_duplicate_sources
      build: added --disable-shared option
      build: enable real cacheing with waf configure -C
      build: fixed build of heimdal/lib/roken/err.h
      build: rkpty should not directly include socket_wrapper.c
      build: more complete implementation of waf configure -C
      build: check if a simple C program runs
      build: added etags and ctags make targets
      build: mark wafsamba as unbuffered, so stdout and stderr are better in sync
      build: don't use double binaries/libs if not needed
      build: fixed handling of full dependencies for --disable-shared
      build: expand indirect syslibs after loop unrolling
      build: sun c compiler wants a newline
      build: python 2.4 doesn't support multiple union arguments for sets
      build: added CHECK_C_PROTOTYPE() configure function
      build: added checks for solaris getXXent_r() functions
      build: fixed prototype test
      build: rewrote the autoconf-like macros to be more consistent
      build: updated configure checks or new syntax
      build: fixed headers for C prototype check
      build: added --with-selftest-prefix
      build: socklen_t is in sys/socket.h
      build: configure fixes for opensolaris
      build: finer grained rpath checking for binary/install
      build: add additional libreplace conditional sources
      build: sys_lease_linux needs to be conditionally enabled
      build: setnttoken depends on libreplace
      build: test all the developer cflags before adding them
      build: add cflags from pkg_config results to header/function tests
      build: added msg argument to CHECK_TYPE()
      build: use shell=True for SAMBA_GENERATOR
      s3-waf: added build subdir for dynconfig generation
      s3-waf: more configure tests and minor fixes
      s3-waf: the start of the main build for s3
      build: use gzip for waf packing, to try to make it work on irix
      build: split out the base waf rules into buildtools/wafsamba/wscript
      build: fixed the cflags for pkg_config libs
      build: honor both --enable-gnutls and --disable-gnutls
      build: need to mark disabled libraries as DISABLED
      build: cope with systems that don't have md5 in python
      s4-waf: don't hardcode python path
      s4-waf: disable_gnutls is gone
      build: fixed case of system library deps
      build: a few more build rules that should have on_results=True
      s4-waf: remove the need for some of the lib aliases
      build: attempt to fix md5 problem on solaris8
      build: need to set h_file on Utils
      build: we need to replace md5 in Task as well
      build: old versions of perl don't understand the -W option
      build: honor existing LD_LIBRARY_PATH settings when adding shared lib paths
      build: solaris8 doesn't honor the -f flag to ln.
      s4-waf: replace stdint.h and stdbool.h on systems that don't have them
      s4-waf: update torture for new ndr/drsblobs.c tests
      s3-waf: modulesdir is in the base set of options now
      build: support variable expansion in source= arguments to build rules
      s3-waf: use new variable expansion feature
      build: started a library of common config tests for s3/s4
      build: a better way of calculating syslib dependencies
      build: much better rpath test function
      build: improved exception handling for systems without rpath
      build: fixed copy_script typo
      s4-waf: cope with systems with zlib versions that are too old
      s4-waf: another place where broken ln -f on solaris8 matters
      s4-waf: added checks for all the different statvfs varients
      s4-waf: look for libiconv before checking libc
      libreplace: add a replacement for strerror_r (needed on solaris8)
      s4-waf: added rap/rpc.c
      s4-waf: fdatasync is in librt on solaris8
      s3-waf: fixed tests for charsets
      build: added quote option to conf.DEFINE()
      s3-waf: charsets needs to be quoted as strings in config.h
      s3-waf: build version.h
      s3-waf: added options for static/shared module building
      build: these chdir() calls break waf on HPUX. They are not needed
      build: fixed EXPAND_VARIABLES() for env expansion
      s4-waf: started adding auto-install of include files
      s4-waf: forgot these files
      s4-waf: test/simple.c is not needed any more
      s4-waf: set CONFIG_H variable for selftest
      build: support wildcard mappings for header_path
      s4-waf: install the rest of the headers
      s4-waf: install pidl
      build: install build python modules correctly
      build: support wildcard excludes in INSTALL_WILDCARD()
      s4-waf: install the rest of our python files
      s4-waf: install PIDL modules
      build: only depend on the actual pidl source files in the pidl rule
      build: a hack to get perl to put its generated blib files in the build directory
      s4-waf: build and install the PIDL manpages
      s4-waf: only build the pidl manpages if we have MakeMaker.pm
      build: added support for pc_files= for pkgconfig files
      s4-waf: enable the pc_files in the build rules
      s4-waf: enable the configuration and options for pidl
      build: fixed destination name for pc_files
      s4-waf: install dcerpc_atsvc.pc
      build: fixed the python path in installed python scripts
      build: substitute @VAR@ variables in pkgconfig .pc.in files
      s4-waf: move the gnu dirs check to the generic wafsamba code
      build: throw an error on all bad variable substitutions
      s4-waf: ensure all the ldb.pc.in vars are set
      build: mark python rules as being part of the "main" group
      s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them
      build: fixed build group for the PIDL tables generation
      build: add an ls -lR blib/ to the pidl build to help debug things in the build farm
      ldb-waf: rename libldb.so to libldb-s4.so if built as part of s4
      build: added support for controlling library types
      s4-waf: set the bundled library extension for some libs
      s4-waf: don't auto-include bundled library headers
      build: better waf test script
      build: better control over bundled library extensions
      s4-waf: set default for bundled libraries
      s4-waf: fixed some deps now we don't auto-include tevent and replace
      s4-waf: we need a recent version of perls MakeMaker module
      s4-waf: support the use of system libraries
      s4-waf: cleanup use of LIBPOPT vs popt dependency
      s4-waf: cleaned up tevent dependency
      build: only add -fPIC if it is supported
      build: auto-detect platforms which don't support shared libs
      s4-waf: more dependencies on talloc
      s4-waf: change bundled extension to 'samba4'
      waf-pidl: don't need this debug ls any more
      s4-waf: merge in the latest changes from master
      build: fixed popt subsystem on systems without popt
      build: work around missing defaults from gnu_dirs.py
      s4-waf: added libreplace dep for the conditional heimdal modules
      s4-waf: fixed dirfd() detection for heimdal
      s4-waf: added auto-detection of perl manpage extensions
      s4-waf: more places missing libreplace
      s4-waf: sys_lease depends on talloc
      build: tidy up the wafsamba rules a bit
      s4-waf: heimdal wants to look for dd_fd in DIR
      s4-waf: get the sense of the tests for the HAVE_INET_* replacements right
      s4-waf: ensure we don't end up with mixed versions of talloc/tdb/tevent
      build: move waf into buildtools/bin
      build: use 'Compiling foo.c' and 'Linking foo' like old build system
      build: fixed progress display
      pidl-waf: re-enable the pidl man pages
      build: reuse SAMBA_LIBRARY() to build python modules
      build: override PACKAGE_VERSION in pkg-config generation for libraries
      build: nicer progress display for a standard build
      s4-waf: added pydoctor and wafdocs targets
      build: added pattern option for recursive_dirlist
      ldb-waf: ldb needs HAVE_CONFIG_H for building a bundled popt
      build: fixed missing nodes display on errors
      talloc-waf: don't build the talloc testsuite in s4
      build: fixed the on_results problem with SAMBA_AUTOPROTO()
      s4-waf: added --enable-fhs configure option
      s4-waf: updated for new perl subunit options and filter name
      s4-waf: added rules for rebuilding the yapp parser in pidl
      s4-waf: removed the AUTOGENERATED markers
      s4-waf: install in /usr/local/samba by default
      s4-waf: added implied_deps for system libraries
      build: fixed a configure error with a totally clean tree
      s4-waf: don't assume perl takes -W option
      s4-waf: use the versions of perl/python found by configure
      build: removed debug line
      build: new waf version with local patches replaced by upstream changes
      s4-waf: show the fully expanded test command
      build: tweak the strategy for finding functions
      s4-waf: added a --enable-selftest option as a shortcut
      s4-waf: added test for dlopen prototype
      build: don't link when checking a C prototype
      build: added functions for compound configuration testing
      build: fixed install target for systems with rpath disabled
      build: expand indirect includes to fix disable-shared build
      s4-waf: add getaddrinfo.c replacement if needed
      s4-waf: look in libintl for dgettext()
      s4-waf: fixed some of the group ordering
      build: add require_headers option to CHECK_BUNDLED_SYSTEM()
      build: python libs need to be built shared, regardless of --disable-shared
      build: add python library object reduction
      build: finally got LIBRARY<->LIBRARY reductions working
      s4-waf: we don't need strerror_r from roken
      build: don't define vars in config.h for CONFIG_PATH()
      build: sys.exit is better than raise here
      s4-waf: use cflags for LDB_MODULESDIR
      s4-waf: remove PYTHONDIR from config.h
      build: refactor the object reduction code
      build: enable 'nothreads' when JOBS=1
      s4-waf: set JOBS=1 during configure.waf
      build: fixed the task counter when nothreads is used
      s4-waf: disable MAKEMAKER until a dependency problem is solved
      build: fixed the dependencies of the install targets
      build: enable nothreads workaround only with WAF_NOTHREADS=1
      build: only link install targets at install time
      build: much simpler and faster rpath install handler
      s4-waf: updates for the new python installer from jelmer
      s4-waf: filter-subunit has been renamed
      s4-waf: added new install system for external python libs
      s4-waf: format-subunit and filter-subunit are in python now
      build: a bit more information for tracking --target deps
      s4-waf: fixed install location of external python libs
      s4-waf: create a blank __init__.py in samba/external
      build: nicer display of command type for prototypes and generators
      build: make sure the directory exists in TOUCH_FILE()
      build: loop until all object reductions are complete
      talloc-waf: match version number with main build
      build: don't depend on the blib/ files in SAMBA_PIDL()
      pidl-waf: build pidl man pages and parsers separately
      pidl-waf: better handling of the man page generation
      pidl-waf: disable pidl manpages
      build: initial version of a tru64 compiler module
      build: added 'generic' cc support and a simple irix cc support module
      build: update wav-svn
      build: try the generic C compiler on hpux if gcc not found
      build: use waf from waf-svn.git repo
      build: try to fix the python link problem on SerNet-imini
      build: waf update to fix macos build error
      build: fixed DESTDIR for TOUCH_FILE()
      build: fixed the expansions in pkgconfig files
      talloc-waf: install talloc.pc if standalone
      build: removed some unused imports found by pyflakes
      s4-waf: added 'waf dist' to build the tarball
      s4-waf: added 'waf dist' to our standalone libs as well
      s4-waf: allow standalone tarball build of libraries
      build: nicer error msg when git ls-files fails
      s4-waf: avoid having to run waf configure before waf dist
      ldb-waf: fixed buildtools path
      s4-waf: fixed finding of buildtools and srcdir
      s4-waf: move to a universal method of recursing into subdirs
      s4-waf: use a common pattern for finding buildtools and libs
      s4-waf: new autogen-waf.sh
      s4-waf: autogen-waf.sh for the standalone library builds
      build: fixed LOAD_ENVIRONMENT for out of tree builds
      s4-waf: added python_dsdb from merge with master
      s4-waf: added simple 'waf test' support for tdb, talloc and ldb
      s4-waf: fixed waf distcheck for our standalone libs and s4
      build: simpler symlink_bin and symlink_lib methods
      s4-waf: replace TOUCH_FILE() with normal install rules
      build: update version of waf to add subdir argument to distcheck
      s4-waf: add subdir argument to distcheck for source4
      build: run distcheck in testwaf.sh
      s4-waf: don't need TOUCH_FILE() any more
      build: cope with binaries with subdir prefixes (for s3 waf build)
      build: use a target_in_list() function for more flexible builtin control
      s4-build: remove any 'makefile' that may have been left by the waf build
      build: make the handling of relative paths a bit saner
      build: the exceptions here are not useful
      build: we need this isinstance() check for distcheck
      build: added --picky-developer and --fatal-errors
      build: no need to re-create the lib and bin symlinks if they exist
      s4-waf: added --gdbtest option for waf test
      build: nicer error message on missing file in waf dist
      build: use Logs.error() and Logs.info() instead of print()
      s4-waf: only enable the python uuid module if python <= 2.4
      build: added --minimum-library-version configure option
      build: cope with symlinks between build components in waf dist
      build: use a common autogen-waf.sh for all builds
      s4-waf: move the KRB5_DEPRECATED check into lib/replace
      build: allow target upgrades from EMPTY to SYSLIB
      s4-ldb: fixed a crash bug for non-UTF8 strings
      build: added cross-compilation configure options
      s4-ldb: enable waf build of ldb without ldap backend
      build: cope with existing binaries in bin/ left over from the old build
      build: fixed a typo that prevented --bundled-libraries from working correctly
      build: check the type of implied dependencies
      s4-tevent: up tevent version number
      build: allow cross-builds to use shared libraries
      build: cope with spaces in options passed to ./configure
      build: added autoconf compatible configure options
      talloc-waf: added the manpage generation and talloc1-compat generation
      build: for unbundled libraries install devel link too
      talloc-waf: the talloc1-compat lib depends on talloc
      tdb-waf: added build of manpages and config options for RPM build
      tevent-waf: added man page and pkgconfig file
      s4-waf: don't try to use the system lib for the library build
      s4: prevent the autoconf build from removing source4/librpc/gen_ndr/README
      build: try to honor MAKEFLAGS from make
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      build: check that the user is not using an old /usr/bin/waf
      build: make the 'wrong version of waf' message even clearer
      build: ensure we don't recreate library loops in expansions
      s4-waf: removed a duplicate declaration of python_netbios
      build: throw a fatal error for duplicate target declarations
      s4-test: check that a weak password is rejected by kpasswd
      s4-test: added KRB5_CONFIG to selftest-vars.sh
      s4-net: nicer error message (and no exception)
      s4-net: allow a username to be displayed in setpassword errors
      s4-rpc: fixed the build with the old build system
      build: added a script for generating ABI signatures from shared libraries
      build: added ABI checking to the WAF build
      s4-waf: put the --xxx-wrapper options in 'developer options' group
      libreplace: added _PUBLIC_ and _PRIVATE_ to replace.h
      replace-waf: hide symbols in libreplace if a builtin library
      talloc-waf: added ABI checking for talloc
      talloc: mark public functions as _PUBLIC_
      tdb-waf: added ABI checking for tdb
      tevent: mark backend init fns as _PRIVATE_
      tevent-waf: enabled ABI checking in tevent
      ldb: mark the tdb backend in ldb as _PRIVATE_
      ldb-waf: enable ABI checking in ldb
      build: added abi type maps for _Bool and __va_list_tag
      s4-waf: rebuild signature files with the api type maps
      build: don't depend on the word size of nm output
      build: added abi_type_maps for FC12 struct va_list
      build: more adjustments for the ABI type name maps
      build: support make V=1 for verbose build
      build: fixed install of binary targets that are in subdirs
      s4-waf: removed the unused installdir= option to SAMBA_BINARY()
      build: cope with perl not being in /usr/bin/perl
      build: more dependencies on /usr/bin/perl -> ${PERL}
      build: expanded testwaf to include cross-compiling and python versions
      build: fixed a python-3 indent error
      s4-python: PyErr_SetString() will crash on NULL strings
      s4-dev: expanded selftest-vars.sh to match current testenv
      build: added --cross-answers support
      runcmd: use tevent_re_initialise() to close sockets
      s4-param: set SMB_CONF_PATH when we load a smb.conf
      s4-dns: use neater python for reading lines
      s4-test: we don't need -s set for samba_dnsupdate
      s4-waf: fixed WINBINDD_SOCKET_DIR for wb_common in s4
      build: make compare_install.sh also check for missing directories
      s4-waf: install some missing empty directories
      build: update waf from svn
      s4-waf: follow the configure directories for the empty install dirs
      build: allow "waf --abi-check" to force a re-check of the ABI
      build: quote cross-answer strings
      build: include uninitialised data in the ABI symbols
      tdb: update tdb ABI to use hide_symbols=True
      talloc: there is no ambiguity when freeing a ptr with a null parent
      pytalloc: ensure talloc_ctx is directly after PyObject_HEAD
      s4-dynconfig: added dyn_PYTHONDIR
      s4-python: added PYTHONDIR to python search path
      s4-net: show a list of commands when someone runs "net" with no arguments
      s4-net: don't show a full python exception when you can't open sam.ldb
      util-runcmd: ignore spurious ECHILD errors
      build: added uname display and SYSTEM_UNAME define
      s4-netlogon: fixed dc_unc and dc_address_type
      s4-pynet: accept None for target_dir in vampire
      s4-devel: allow extra net command line options and gdb
      s4-python: accept --option arguments in python cmdline parsing
      s4-schema: allow revision numbers of zero
      s4-provision: set "setup_dir" to the right path
      s4-python: added --realm option to python scripts
      s4-waf: create the smbd.tmp/messaging directory
      s4-provision: cope with --realm being in getopt.py
      s4-drs: accept zero revision in drs selftest
      s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3
      build: fixed uname output to be on target machine when cross compiling
      s4-server: show build host in samba -b output
      waftest: updated the cross compilation environment I test with
      build: make python development headers not mandatory in standalone libs
      s4-waf: python devel headers are mandatory for the source4 build
      build: added --nonshared-binary=LIST option
      build: recalculate project deps when NONSHARED_BINARIES changes
      build: added --enable-auto-reconfigure
      s4-dsdb: moved rodc schema validation to samldb.c
      build: we don't need this makefile magic any more
      s4-dsdb: added dsdb_get_extended_dn_sid()
      s4-dsdb: added dsdb_validate_invocation_id()
      s4-dsdb: removed an unused variable
      s4-drs: only allow replication with the right invocationId
      s4-drs: removed dsdb_validate_client_flags()
      s4-libnet: fixed two compiler warnings
      s4-torture: fixed a initialiser
      s4-net: fixed two compiler warnings
      s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER level
      s4-drs: validate RODC credentials via the user_sid
      s4-cldap: we should set the w2k8 flags even if not the PDC emulator
      build: use 'waf distclean' for make distclean
      build: give a more useful error when the source dir has moved
      build: cope with duplicates in source lists
      build: use option_group() not add_option_group()
      build: a library is only empty if it has no deps
      build: normalise paths in unique source checking
      s4-heimdalbuild: remove LIBNETIF dependency from HEIMDAL_GSSAPI
      build: automatically run autogen-waf.sh when needed
      s4-drs: make links to foreign partitions non-fatal
      build: cope with realname for install of non-python libs
      s4-drepl: don't send an UpdateRefs unless its a plain replication
      s4-drs: don't send uninstantiated objects in getncchanges
      s4-drs: allow getncchanges requests to non WRIT_REP partitions for extended ops
      s4-ddb: don't create partitions with the UNINSTANT flag set
      s4-repl: don't delete repsTo entry on DsReplicaSync
      s4-repl: end repl request when not doing an UpdateRefs
      s4-repl: on a failed request, clear the current ptr
      s4-repl: these messages are common, and don't deserve debug level 1
      s4-getncchanges: honor DRSUAPI_DRS_REF_GCSPN
      s4-drepl: don't setup a repsFrom from a DC that isn't a master for a NC
      s4-drs: add entries to repsTo based on calculated repsFrom
      s4-dns: fixed dc.dc duplication in DNS update list
      s4-repl: added a workaround for WERR_DS_DRA_NO_REPLICA DsReplicaSync errors
      s4-vampire: show main CLDAP response attributes during vampire
      s4-drsdevel: support sites in drs developer scripts
      s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch
      s4-libnet: cope with an empty client site name from CLDAP
      s4-dns: cope better with comments in dns_update_list
      s4-dns: explain what the file is for
      s4-dsdb: added samba_spnupdate
      s4-param: added a "spn update command" option
      s4-dns: call spn update command alongside dns update
      s4-dns: install samba_spnupdate
      s4-provision: setup spn_update_list in provision
      s4-test: make spnupdate work without make install
      s4-torture: not all platforms have defines like AF_AX25
      s4-netlogon: fixed getDcNameEx2 for blank inputs
      build: added enabled=True/False option to SAMBA_BINARY()
      s4-waf: added --enable-build-farm configure option
      s4-idl: added generated files from rap.idl
      idl: we only need ndr_rap.[ch] and rap.h
      s4-ldb: use a parent context in the ldb utils
      build: uname on opensolaris returns 1 for success
      s4-waf: switch Samba4 over to the waf build by default
      s4-waf: fixed symlink path for autogen.sh
      build: fix for combined configure/build in one command
      build: added a check for group ordering within target dependencies
      s4-waf: fixed target group for SOCKET_WRAPPER
      build: use the waf patterns for RPATH
      build: allow use of target names as commands in waf
      s4-script: added a --waf option to minimal_includes.pl
      s4-waf: fixed indentation for python 3.1
      build: fixed wildcard handling for python 3.x
      build: enable python 3.0 and 3.1 in testwaf.sh
      idl: removed the generated gen_ndr/ files from pidl
      s3-idl: removed gen_ndr files from source3/ as well
      .gitignore: simplify the .gitignore after gen_ndr removal
      s4-waf: we don't need the symlink hack for gen_ndr any more
      s3-idl: auto-build IDL files in Samba3
      s3-idl: rebuild IDL files based on all outputs
      s3-idl: update the 2nd build_idl.sh script
      s4-ldb: add msg saying which build system is being used
      build: exit with an error if waf configure fails
      build: mark cloned task generators as not posted
      build: added a distcheck target
      build: use the wrapper commands in testwaf.sh
      build: update version of waf
      build: added configure test for inline
      s3-build: don't rebuild/link on every make run
      s4-ldb: check for ldap_initialize
      build: added a reconfigure target
      s4-devel: a useful script for giving DRS replication demos
      s4-devel: auto-delete any leftover IPs
      build: treat a blank --build or --host as not a cross-compile
      build: fixed pc file variable substitution
      s4-devel: a very useful script when dealing with library/linking issues
      s4-dynconfig: make dynconfig more compatible with s3
      s3compat: use right variable for STATEDIR
      s3-waf: All sorts of nasty hacks to finally get smbd to build/link
      s3-waf: correctly handle cups dependencies when cups development packages are not installed
      s3-waf: correctly handle the libcap dependency when libcap is not installed
      s3-waf: Add enable selftest configuration option
      s3-waf: move the KRB5_DEPRECATED check into lib/replace
      s3-waf: merged auth subsystem changes from master
      s3-waf: fixed SWATDIR to match old build
      s3-waf: fixed install path for sbin binaries
      s3-waf: install swat files
      build: get the SONAME right for installed libraries
      s4-python: python is not always in /usr/bin
      build: check if the manpages stylesheet is available locally
      s4-ldb: use CHECK_XSLTPROC_MANPAGES()
      build: allow always=True/False on SAMBA_GENERATOR()
      build: allow LOAD_ENVIRONMENT() to pass when no configure has been run
      build: only use git when found by configure
      s4-dsdb: fixed spelling of supportedSASLMechanisms
      s4-dsdb: fixed use after free of sasl mechanisms opaque
      s4-ldb: fixed the parsing of references in the openldap backend
      s4-ldb: fixed error handling in openldap backend
      s4-ldb: added ldb_options_find()
      s4-ldb: added support for simple binds on ldb_ldap backend
      s4-ldb: added ldb_error() and ldb_operr()
      s4-dsdb: use ldb_operr() in the dsdb code
      s4-net: the net binary depends on the auth subsystem
      s4-loadparm: change lp_*() to lpcfg_*() and provide s3 compatibility lp_*()
      s4-loadparm: 2nd half of lp_ to lpcfg_ conversion
      waf-idl: put the gen_ndr/README file for source3 back
      waf: make the error msg when gen_ndr directory is missing clearer
      lib: added samba-util.pc creation

André Hentschel (1):
      net: Add German translation, specially for the command listing

Aravind Srinivasan (3):
      s4 torture: RAW-SEARCH: break out some of the old search levels
      s4 torture: RAW-SFILEINFO display warning instead of error on unsupported info level
      s4 torture: Warn on NOT_IMPLEMENTED in addition to NOT_SUPPORTED for RAW-QFILEINFO

Björn Jacke (81):
      Ñ•3/i18n/de: fix typo
      s3/i18n/de: improve some German translations
      s3/net: split up some printable stings to ease i18n
      s3: build with dnsupdate support when possible
      s3: fix dnsupdate configure check
      s3/doc: update vfs_shadow_copy2 man page according to new options
      s3:netapi: remove unused variable
      s3: remove unused Variable
      libreplace: fix unused varibale warning on IRIX
      s3:async_smb: remove unused variable
      s3: remove unused variable
      s3: fix detection and flags for using pthread
      Revert "libreplace: fix unused varibale warning on IRIX"
      s3: get pthread detection also on HP-UX right
      s3: syntax fix
      s3: by default don't use pthread pool support
      s3: link thread objects in libsmbclient only and adjust linker flags
      s3:configure: check complete set of EA functions only when we found at least one
      s3:vfs_scannedonly: fix build on HP-UX
      s3: fix build on Tru64 after it broke with deactivating pthread pool support
      s3:nsswitch: also use pthread CFLAGS for the nsswitch modules that might require it
      s3: fix build issue on Tru64
      s3: quiet the unresolved symbol warnings of the Compaq compiler when linking our vfs modules
      vfs_catia: fix return type warnings
      s3: fix some wrong newlines in de translation strings
      s3: change ldap filter to what really was intended
      s3:docs: add some advice for usage of strict allocate
      s3: optimize strict allocate for XFS on IRIX
      s3: add explicit configure option whether or not to enable dmapi support
      s3:vfs_aixacl2: add missing semicolon
      s3: remove cross-device rename support from vfs_default
      s3: add vfs_crossrename
      s3: add man page for vfs_crossrename
      s3: add missing Makefile.in changes for vfs_crossrename
      Ñ•4: EDQUOT needs to be mapped to NT_STATUS_DISK_FULL
      s3: add comment about what the FSCTL_QUERY_ALLOCATED_RANGES currently does
      s3/packaging: make rpm build work by overriding strict linker flags
      s3:configure: not simply check for "ld" but for the linker used by $CC
      s3: fix the merged build - it required $LD
      s3:configure: use correct SONAMEFLAG on Solaris depending on which linker is being used
      s3:configure: search fdatasync also in librt
      idl: fix Unix builds by replacing bashism
      idl: get the logic of the prevous commit right
      waf:libreplace: set _OSF_SOURCE to fix build on Tru64
      pidl: fix build on systems that don't have perl in /usr/bin/
      not all versions of env like more than one argument...
      s3:build: don't use pieflags twice - ldflags already have them
      s3:Makefile: position independency is also needed for shared libs
      s3:build: remove CFLAGS from LDSHFLAGS, SHLD has them already
      s3:Makefile: set PIE flags also for nss_winbind
      s3: major overhaul of compiler and linker flags for HP-UX builds
      s3:configure: add Werror_FLAGS for IBM's xlc
      s3:configure: turn "error warnings" into errors
      s3: fix the configure run
      s3:configure: use the right AC_CACHE_CHECK variable
      s3:Makefile: fix a typo in flag variable name
      s3:Makefile: add missing linker flags for smbfilter
      s3: add m4 macro to check if stderr is empty or not
      s3: fix check for pie compiler flags
      Revert "s3: Attempt to fix the non-gnumake build"
      s3: set pthread cflags in a more portable fashion
      libreplace: include sys/file.h only when available
      s3: use autoconf macro to get some debug output in config.log
      s3: final test for working shlib support requires PIE_LDFLAGS
      s3: use PICFLAG instead of PIE_FLAGS
      s3:configre: work around shell problem on HP-UX in AC macro
      Ñ•3:Makefile: use PIC instead of PIE flags for shared libs
      s3: fix build on Heimdal based systems like NetBSD5
      s3:build: add shared lib flag for HP-UX compiler
      s3: fix build on platforms without st_blocks and st_blksize stat struct members
      s3: fix calculation of st_blocks in init_stat_ex_from_stat
      s3: fix calculation of st_blocks in streams_xattr
      s3: fix build on HP-UX
      s3: readd h_errno struct member but rename it
      s3:configure: use cc for linking on IRIX and fix shlib usage
      s3:pdb_ldap: change LDAP password before samba password hashes
      Revert "s3: Don't use as-needed"
      s3: add configure swtich to manually disable as-needed
      s3: check for explicit external lib bug in ld's as-needed code
      s3: also run the test prog from the explicit external lib bug check
      s3: not use as-needed by default and auto use if enable-developer is active

Bo Yang (7):
      s3: Fix malformed require_membership_of_sid.
      s3: signals are processed twice in child.
      s3: Don't invalidate cache for uninitialized domains.
      s3: Add i18n/l10n strings in pam_winbind.c coming from winbindd.
      s3: Rerun genmsg after adding more strings.
      s3: Fix unnecessary traversing winbindd_cache.tdb in SIGHUP handler.
      s3: Open winbindd_cache.tdb with read/write access.

Brad Hards (15):
      Spelling fixes for tdb.
      Spelling fixes for tevent.
      Spelling fixes for popt API documentation.
      Spelling fixes for nss_wrapper.
      Spelling fixes for lib/compression.
      Spelling fixes for tsocket API documentation.
      Spelling fixes for libreplace.
      Spelling fixes in lib/zlib.
      Spelling fixes for libutil
      LDB related spelling fixes.
      Typo fix.
      Spelling fixes for source4/lib/registry.
      Spelling fixes for source4/auth.
      Various source4 spelling fixes.
      More spelling fixes across source4/

Brendan Powers (1):
      libcli: Fixed a segfault in security_acl_dup when the acl is NULL.

Chere Zhou (1):
      s3:smbd: Align change notify replies on 4-byte boundary

Christian Ambach (2):
      update samba schema for IBM Directory Server
      fix a segfault in the notify subsystem

Christian PERRIER (1):
      s3: Merge French translation for pam_winbind after review

Craig Miskell (1):
      Fix bug #7191 - WINS doesn't respond after > 86 #1c registrations.

Crístian Deives (5):
      s4-kcc: initial code for the topology algorithm
      new function kcctpl_color_vertices
      spanning tree computation
      nTDSConnection creation
      use unsigned instead of uint32_t for LDB counters.

Derrell Lipman (1):
      [Bug 7345] Incomplete description of function return values in libsmbclient.h

Ed Plese (3):
      Add sort parameter to shadow_copy2.
      Add format parameter to shadow_copy2.
      Add localtime parameter to shadow_copy2.

Eduardo Lima (4):
      s4-drs: implementation of some delete test cases
      s4-drs: enable the recyclebin optional feature
      s4-drs: check if an optional feature is enabled
      s4-drs: replmd_delete with the 3 stage deletion recycle bin

Endi S. Dewata (16):
      s4-provision: Disable populating FDS during instance creation.
      s4-provision: Fixed typos and redundant code
      s4-provision: Added msDS-NcType into samba4Top object class
      s4:provision - Use netbios name for FDS instance name.
      s4:provision - Moved backend-specific variables into backend class.
      s4:provision - Moved setup_db_config() into OpenLDAPBackend class.
      s4:provision - Moved default FDS SASL mappings deletion from post_setup() to init().
      s4:provision - Updated FDS schema mapping.
      lib/util - Removed curly braces from generate_random_password().
      s4:dsdb - Handle INVALID_DN_SYNTAX from OpenLDAP in dsdb_module_load_partition_usn().
      s4/ldb: ldb_msg_el_map_remote() should rename the remote attribute names into local names as defined in simple_ldap_map.c.
      s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN.
      s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend.
      s4/spnupdate: Fixed spnupdate to use secrets credentials when accessing SamDB.

Erick Nogueira do Nascimento (5):
      s4-drs: torture test for DsGetReplInfo() (RPC-DSGETINFO test).
      s4-drs: DsReplGetInfo() for DS_REPL_INFO_REPSTO infoType
      s4-drs: DsGetReplInfo() refactoring
      s4-drs: DsGetReplInfo(), infoType = DS_REPL_INFO_METADATA_2_FOR_OBJ
      s4-drs: Torture testcase for DS_REPL_INFO_METADATA_2_FOR_OBJ infoType of DsGetReplInfo()

Fernando J V da Silva (14):
      s4-drs: Store uSNUrgent for Urgent Replication
      s4-drs: Uses dsdb_load_partition_usn() with urgent_uSN in s4 code
      s4-drs: Reads uSNUrgent and sets Urgent Replication Bit for DS_ReplicaSync when necessary
      s4-drs: Fixes bugs regarding Urgent Replication on wrong situations
      s4-drs: Function for accessing dsdb_load_partition_usn from Python
      s4-drs: Test situations for Urgent Replication
      s4-drs: If we are a RODC then do not send DSReplicaSync messages
      s4-drs: Do not allow system-critical attributes to be RODC filtered
      s4-drs: samdb_is_rodc() function and new samdb_rodc() function
      s4-drs: dsdb_validate_client_flags() function
      s40-drs: Do not send GetNCChanges messages to RODCs
      s4-drs: Do not send RODC filtered attributes to RODCs on GetNCChanges reply
      s4-drs: Use new samdb_rodc() function in s4 code

Giovanni Bajo (1):
      s3-lanman: Allow a level2 descriptor for a level1 NetShareGetInfo

Gregor Beck (3):
      s3: registry: fix query empty valuenames
      s3: registry: let test_setvalue use getvalueraw instead of enumerate
      s3: registry: add tests with empty valuename

Günther Deschner (839):
      testprogs: add more error codes to spoolss test.
      testprogs: fix EnumPrintProcessorDatatypes spoolss test.
      testprogs: test each printer, do not abort after first failure.
      testprogs: fix driver levels in spoolss test.
      s4-smbtorture: allow test_SamLogon to test interactive samlogon in RPC-SAMR family of tests.
      s4-smbtorture: add RPC-SAMR-PASSWORDS-BADPWDCOUNT torture test.
      s4-smbtorture: fix GetAliasMembership test in RPC-SAMR.
      testprogs: add EnumPrinterKey test to spoolss test.
      testprogs: remove unused test_EachDriver from spoolss test.
      s4-selftest: RPC-SAMR-PASSWORDS-BADPWDCOUNT fails against s4.
      s4-smbtorture: add rather simple libsmbclient torture testsuite.
      s3-libsmbclient: Fix crash bug in SMBC_parse_path().
      s4-smbtorture: add setup_schannel_netlogon_pipe() function.
      s3-selftest: use testenv dc so that smbtorture4 actually uses the client configuration.
      testprogs: pass down LPPRINTER_DEFAULTS in spoolss test.
      testprogs: add tests for GetForm.
      testprogs: add tests for GetPrinterData{Ex} and EnumPrinterDataEx.
      s4-smbtorture: strip trailing whitespace.
      s4-smbtorture: skip ReplyOpenPrinter test in RPC-SPOOLSS-NOTIFY while testing s3.
      s4-smbtorture: restructure spoolss server implementations in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: support spoolss_ReplyClosePrinter server call in RPC-SPOOLSS-NOTIFY.
      s3-selftest: use absolute path when setting SOCKET_WRAPPER_DIR.
      s3-spoolss: stricter name checks when opening back-channel notify connection.
      s3-selftest: finally enable RPC-SPOOLSS-NOTIFY against s3.
      s4-smbtorture: also configure check smbc_setOptionCaseSensitive for LIBSMBCLIENT testsuite.
      s4-smbtorture: remove unneeded ncaclrpc dir setup from RPC-SPOOLSS-NOTIFY.
      testprogs: print all driver info levels in spoolss testsuite.
      s4-smbtorture: split spoolss_RemoteFindFirstPrinterChangeNotifyEx test into smaller parts.
      s4-smbtorture: add test for wbcPingDc to WINBIND-WBCLIENT testsuite.
      s4-smbtorture: test wbcResolveWinsByName/wbcResolveWinsByIP in WINBIND-WBCLIENT testsuite.
      s4-smbtorture: also test smbc_getOptionUseCCache
      s3-selftest: try to get RPC-SPOOLSS-NOTIFY running during make test on the buildfarm.
      s4-smbtorture: pick correct last packet while checking backchannel replies in RPC-SPOOLSS-NOTIFY.
      testprogs: also print printer info during GetPrinter spoolss test.
      s4-smbtorture: rework spoolss_NotifyOption handling in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: also test RouterRefreshPrinterChangeNotify call in RPC-SPOOLSS-NOTIFY.
      s4-smbtorture: check for RouterReplyPrinterEx packets inside backchannel in RPC-SPOOLSS-NOTIFY.
      s3-net: fix net ads dns usage calls.
      s4-smbtorture: skip over ValidatePassword if DCERPC error is returned.
      testprogs: print form info levels in EnumForms(),GetForm() spoolss tests.
      testprogs: print port info levels in EnumPorts() spoolss tests.
      testprogs: print monitor info levels in EnumMonitors() spoolss tests.
      testprogs: print printprocessor info levels in EnumPrintProcessors() spoolss tests.
      testprogs: print datatypes info levels in EnumPrintProcessorDatatypes() spoolss tests.
      testprogs: print job info levels in EnumJobs() spoolss tests.
      testprogs: regenerate printlib prototypes for spoolss test.
      s4-smbtorture: use test_GetPrinter_level in RPC-SPOOLSS-NOTIFY.
      testprogs: add more error codes for spoolss test.
      testprogs: use ConvertSidToStringSid in order to print sids in spoolss test.
      testprogs: print secdesc->Control in spoolss test.
      testprogs: one more error code for spoolss test.
      s3-spoolss: implement spoolss_EnumJobs level 3.
      spoolss: allow to set server architecture via parametric option.
      s3: re-run make samba3-idl.
      spoolss: regenerate hand-marshalled ndr_push_spoolss_DriverInfo101 after ndr64 changes.
      spoolss: make sure hand-marshalled spoolss_DriverInfo101 handles relative_highest_offset.
      spoolss: regenerate hand-marshalled ndr_pull_spoolss_DriverInfo101 after ndr64 changes.
      testprogs: print all printerinfo levels in spoolss test.
      s4-smbtorture: add some security descriptor tests to RPC-SPOOLSS and RPC-SPOOLSS-PRINTER.
      spoolss: disable GetPrinterDriver level 101 (as called by XP).
      testprogs: fix EnumJobs debug output in spoolss test.
      s4-smbtorture: w2k8r2 allows to add printers w/o defining printprocessor.
      s4-smbtorture: use test_SetPrinter call in spoolss security descriptor tests.
      s4-smbtorture: add rather simple spoolss device mode test.
      s4-smbtorture: more work on SD tests for RPC-SPOOLSS.
      testprogs: add "samba3" and "architecture=" options to spoolss tester.
      s4-smbtorture: allow to call OpenPrinterEx with devicemode.
      s4-smbtorture: more work on test_PrinterInfo_DevMode RPC-SPOOLSS-PRINTER.
      s4-smbtorture: fix spoolss SD test against w2k8r2.
      testprogs: add rather simple device mode tests to spoolss test.
      s4-smbtorture: refactor setprinter devicemode calls in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: also test level 2 sets for devicemodes and see if they persist.
      s4-smbtorture: unify test list to run against single created printers in RPC-SPOOLSS-PRINTER.
      s3-rpcclient: fix uninitialized variable in wkssvc_enumerateusers.
      s4-smbtorture: avoid potential loop while adding a new printer in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: simplify test_PrinterInfo_DevMode a bit.
      s4-smbtorture: try more combinations to find printers in test_EnumPrinters_findname().
      s4-smbtorture: skip printer info cross tests against samba 3 for now.
      s3-modules: fix get_acl_blob in the acl_tdb VFS module.
      testprogs: print SDDL string of printer security descriptors
      s3-spoolss: add some printer info validation for AddPrinter calls.
      s3-spoolss: more AddPrinter{Ex} checks.
      s3-spoolss: in spoolss_EnumPrinters r->in.server is a *unique* pointer!
      s3-spoolss: fix return code of spoolss_DeletePrinter.
      s3-selftest: include addprinter/deleteprinter command.
      s3-selftest: finally enable RPC-SPOOLSS-PRINTER against Samba 3.
      s3-selftest: fix return code for modprinter.pl -a.
      s3-spoolss: Fix _spoolss_EnumPrinters servername handling.
      libndr: add ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.
      pidl: use ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.
      s3: re-run make full_idl.
      spoolss: fix relative pointers in ndr_push_spoolss_DriverInfo101.
      libndr: change subcontext buffer allocation to allocate on subcontext_start.
      libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag.
      libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processing
      libndr: store a subcontext buffer size in ndr_push_subcontext_start.
      spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative pointers.
      spoolss: make two bitmaps public.
      security: make two bitmaps public.
      s3: re-run make samba3-idl.
      spoolss: add spoolss_security_descriptor.
      spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves devmode relative pointer down to sd).
      testprogs: add RPC_S_PROCNUM_OUT_OF_RANGE error.
      testprogs: add tests for GetJob() to spoolss test.
      s4-smbtorture: be more verbose in LOCAL-NSS-WRAPPER.
      s4-smbtorture: add LOCAL-NSS-WRAPPER-DUPLICATES test.
      s3-spoolss: add support for _spoolss_SetPrinter level 8.
      testprogs: ignore GetJob level 3 and 4 against samba for now.
      s4-smbtorture: print more comments while running SD and DM tests in RPC-SPOOLSS-PRINTER.
      s4-smbtorture: add --option=torture:spoolss_check_size=yes.
      s4-smbtorture: explain failure conditions in printer device mode tests a little more.
      s4-smbtorture: more work on devicemode tests.
      spoolss: add various DM extradata formats (including PostScript and UniDriver).
      s3: re-run make samba3-idl.
      spoolss: some fixes for devicemode dm extra structs.
      s3: re-run make samba3-idl.
      s4-smbtorture: verify that the client cpu architecture has no influence on the
      s4-smbtorture: move ChangeID test to the list of tests we run against created printers.
      s4-smbtorture: try to set every single devicemode component in RPC-SPOOLSS-PRINTER.
      s3-spoolss: Save entire devicemode.
      s4-smbtorture: define environment in one place in RPC-SPOOLSS test.
      s3-nltest: fix uninitialized query level.
      testprogs: print the directory paths as well in spoolss test.
      s3: remove unused schannel_auth_struct.
      spoolss: add spoolss_Build to IDL.
      spoolss: fix build and version in spoolss_PrinterInfo0 (aka PRINTER_INFO_STRESS).
      s4-smbtorture: test at least three different regtypes in test_SetPrinterDataEx.
      s4-smbtorture: return needed size pointer from test_GetPrinterDataEx.
      s4-smbtorture: add test_SetPrinterDataEx to RPC-SPOOLSS-PRINTER.
      s4-smbtorture: add stricter SetPrinterDataEx tests to spoolss tests.
      testprogs: add RPC_X_NULL_REF_POINTER error code
      testprogs: allow to test a single printer when given on the cmdline.
      testprogs: add DeletePrinterDataEx test.
      testprogs: add DeletePrinterKey test.
      testprogs: add SetPrinterDataEx test.
      testprogs: rename test_PrinterData to test_PrinterData_Server.
      testprogs: add very basic PrinterData test for printers.
      testprogs: better usage text.
      testprogs: test result of GetPrinterDataEx against SetPrinterDataEx args.
      testprogs: fix REG_SZ in print_printer_data.
      testprogs: make sure to do the same tests as in smbtorture in test_PrinterData().
      s4-smbtorture: fix WINBIND-STRUCT assumptions about getpwent() for s3.
      testprogs: fix boolean return code of test_PrinterData.
      testprogs: add some multibyte versions of PrinterData calls.
      testprogs: add print_printer_dataw and dump_data to printlib.
      testprogs: use dump_data in dump_printer_data.
      testprogs: add test_PrinterDataW.
      s4-smbtorture: skip NotifyChangeKeyValue test against s3 for now.
      s3-selftest: enable RPC-WINREG against Samba 3.
      spoolss: rollback SetPrinterData{Ex} IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: fix _spoolss_SetPrinterData{Ex} after IDL change.
      s3-net: fix net after spoolss_SetPrinterData{Ex} IDL change.
      s3-rpcclient: fix rpcclient after spoolss_SetPrinterData{Ex} IDL change.
      s4-smbtorture: fix smbtorture after SetPrinterData{Ex} IDL changes.
      spoolss: rollback GetPrinterData[Ex] IDL.
      s3: re-run make samba3-idl.
      s3-spoolss: fix _spoolss_GetPrinterDataEx after IDL change.
      s3-rpcclient: fix rpcclient after spoolss_GetPrinterData{Ex} IDL change.
      s4-spoolss: fix spoolss_GetPrinterData implementation after IDL change.
      s4-smbtorture: fix smbtorture after GetPrinterData{Ex} after IDL changes.
      spoolss: fix spoolss_EnumPrinterDataEx IDL.
      s3: re-run make samba3-idl.
      s3-net: fix net after spoolss_EnumPrinterDataEx IDL change.
      s3-rpcclient: fix rpcclient after spoolss_EnumPrinterDataEx IDL change.
      s3-spoolss: fix _spoolss_EnumPrinterDataEx after idl
      s3-libads: fix get_remote_printer_publishing_data after spoolss_EnumPrinterDataEx IDL change.
      s4-smbtorture: remove check for selfmade parsing artefact.
      s4-smbtorture: add more paranoid checks for REG_DWORD SetPrinterDataEx tests.
      s4-smbtorture: hand down printername to test_SetPrinterDataEx_matrix.
      s4-smbtorture: when checking PrinterData matrix, include winreg cross reference checks.
      s4-smbtorture: fix test_SetPrinterDataEx_matrix() call. sorry...
      s4-spoolss: fix dcesrv_spoolss_GetPrinterData build.
      s4-smbtorture: fix RPC-SPOOLSS-WIN after PrinterData IDL changes.
      winreg: fix winreg_QueryValue IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix uninitialized variable in winreg QueryValue call.
      s4-smbtorture: add tests for set and delete value in RPC-WINREG.
      s4-smbtorture: rework test_winreg_QueryValue in RPC-SPOOLSS-PRINTER once again.
      s4-smbtorture: add full coverage test for winreg QueryValue calls.
      s4-smbtorture: on HKLM hive test the well known CurrentVersion value.
      s4-smbtorture: fix some build warnings in RPC-SPOOLSS test.
      s4-smbtorture: disable winreg QueryValue test for today.
      s4-spoolss: remove unsed iconv handle from dcesrv_spoolss_GetPrinterData().
      s4-smbtorture: check for non existing value under version key in RPC-WINREG.
      s4-smbtorture: do full winreg QueryValue test for values we created.
      s3-winreg: add some debug statements to _winreg_QueryValue().
      Revert "s4-smbtorture: disable winreg QueryValue test for today."
      s4-smbtorture: while testing PrinterDataEx also compare Get and Enum results.
      s4-smbtorture: only look at DATA_BLOB pointer when einfo[0].data_length > 0.
      s3-winreg: Fix _winreg_QueryValue crash bugs and implement windows behavior.
      s4-registry: add all winreg types to reg_value_types table.
      s4-smbtorture: more work on test_key_value() RPC-WINREG test.
      s4-smbtorture: add extended SetValue test to RPC-WINREG.
      s4-winreg: continue processing in WERR_MORE_DATA case in dcesrv_winreg_QueryValue().
      s3-winreg: fix some function names in debug statements.
      winreg: add winreg_KeyType enum.
      s4-smbtorture: test NULL and "" valuenames as well in query for wellknown winreg key.
      s4-smbtorture: skip extended SetValue test against Samba (both dont survive).
      s3-winreg: make QueryValue pass RPC-WINREG test again.
      s4-smbtorture: add netr_SamLogon test with NULL domain to RPC-NETLOGON-S3.
      s3-netlogon: Fix bug #7237: _netr_SamLogon segfaults for clients sending NULL domain.
      s4-smbtorture: make sure RPC-SPOOLSS passes against 64bit archs (w2k8r2).
      s4-smbtorture: re-arrange spoolss_SetPrinterData() tests.
      s4-smbtorture: refactor SetPrinterData() calls a little more.
      s4-smbtorture: refactor spoolss EnumPrinterData test.
      s4-smbtorture: add spoolss EnumPrinterData vs EnumPrinterDataEx consistency test.
      s3-spoolss: wrap _spoolss_EnumPrinterData() around _spoolss_EnumPrinterDataEx().
      s4-smbtorture: fix build and handle in spoolss test.
      s4-smbtorture: send even more random data in extended winreg SetValue test.
      s4-smbtorture: warn on unexpected devicenames in spoolss devicemode test.
      s4-smbtorture: fix torture_comment in RPC-SPOOLSS.
      s4-smbtorture: add PrinterInfo_to_SetPrinterInfo helper to RPC-SPOOLSS.
      s4-smbtorture: when cross checking enumdata{ex} make sure to have at least one entry.
      s3-spoolss: Fix _spoolss_EnumPrinterData.
      s4-smbtorture: cleanup data after enumdata{ex} consistency test.
      s4-smbtorture: fill PrinterDriverData with more values for consistency test.
      testprogs: add EnumPrinterData test to win32 spoolss test.
      s4-smbtorture: add simple printer rename test to RPC-SPOOLSS-PRINTER.
      s3-spoolss: be very strict on OpenPrinter{Ex} failures for bad names.
      s4-smbtorture: avoid printf calls in RPC-WINREG test.
      s3: re-run make samba3-idl.
      s3-lsa: fix _lsa_lsaRSetForestTrustInformation server stub.
      s4-lsa: fix dcesrv_lsa_lsaRSetForestTrustInformation server stub.
      s4-smbtorture: make it a bit easier to track failures in RPC-SPOOLSS-PRINTER.
      s3-registry: make sure root has full registry access (in particular for make test).
      s3-winreg: change notify call has no meaning when called remotely.
      s4-smbtorture: remove NotifyChangeKeyValue s3 skip in RPC-WINREG:
      s4-smbtorture: use random buffer for extended SetValue test in RPC-WINREG.
      lsa: fix IDL for lsa_SetTrustedDomainInfoByName.
      s3: re-run make samba3-idl.
      s4-smbtorture: add lsa_SetTrustedDomainInfoByName NDR test.
      s3: fix buildwarning in smbta-util.
      s3-vfs: fix some buildwarnings in traffic analyzer, there are many more.
      s4-smbtorture: use binding handle for simple SetValue winreg test.
      s4-smbtorture: put HKLM current_version test into an own function.
      s4-smbtorture: add test_CreateKey_opts() to RPC-WINREG test.
      s4-smbtorture: add test_OpenKey_opts() to RPC-WINREG.
      s4-smbtorture: add test_DeleteKey_opts to RPC-WINREG.
      s4-smbtorture: add test to check different keytypes.
      s4-smbtorture: re-arrange tests in RPC-WINREG.
      s4-smbtorture: skip security descriptor tests against Samba in RPC-WINREG.
      s4-smbtorture: only use "friendly" data in extended SetPrinterDataEx test.
      s4-smbtorture: workaround the fact that you cannot fully rename a printer in samba.
      s4-smbtorture: workaround broken REG_MULTI_SZ from winreg in s3
      s4-smbtorture: skip BackupLog test against samba in RPC-EVENTLOG.
      s3-selftest: setup initial eventlog infrastructure.
      s3-test: setup initial eventlog infrastructure.
      s3-selftest: run RPC-EVENTLOG against s3.
      s3-eventlog: fix elog_tdbname(), we were always lower-casing entire lockdir path...
      s4-smbtorture: fix typo in RPC-SAMR-PASSWORDS-LOCKOUT test.
      s3-selftest: make sure we do not have duplicate uids/gids in nsswrapper.
      s3-selftest: make sure we do not have duplicate uids/gids in nsswrapper.
      s3-selftest: fix Samba3.pm provisioning after uid/gid changes.
      s4-smbtorture: use torture_context in policy function in RPC-LSA-LOOKUP test.
      error_codes: fix NT_STATUS_RPC_UNKNOWN_IF typo.
      nss_wrapper.pl: allow to specify gid for new users.
      s3-selftest: rearrange uid/gid calculation to achieve correct membership.
      s3-selftest: rearrange uid/gid calculation to achieve correct membership.
      s4-smbtorture: skip RAP netservergetinfo level 1 test against s3.
      s3-selftest: enable RAP calls testsuite against samba3.
      s4-smbtorture: put all RPC-SAMB3-X torture tests into their own torture_suite.
      s3-selftest: use proper names for samba3 dcerpc tests.
      s4-smbtorture: rework RPC-DFS test a bit.
      s4-selftest: skip RPC-DFS for s4 entirely.
      s4-selftest: fix selftest-vars script.
      s3:re-run make samba3-idl.
      s4-smbtorture: remove trailing whitespace in libnet torture tests.
      s4-smbtorture: use torture_context for debugging output everywhere in libnet torture tests.
      s4-smbtorture: use torture_context in libnet domain tests as well.
      s4-smbtorture: remove trailing whitespace from samsync torture test.
      s4-smbtorture: use torture_context in samsync test.
      s4-smbtorture: remove tailing whitespace in samba3rpc testsuite.
      s4-smbtorture: add rap_get_servername to RPC-SAMBA3 family of tests.
      s4-smbtorture: cleanup some of the RPC-SAMBA3 tests.
      s4-smbtorture: fix some invalid parameters in RPC-SAMSYNC test.
      s4-smbtorture: add missing checks for WERROR results in RPC-SAMBA3 tests.
      s4-selftest: use correct test names.
      s4-smbtorture: move up torture_assert_sid_equal at least to the torture/ndr level.
      s4-smbtorture: add drsblobs ndr torture test.
      s4-smbtorture: mention job id in SetJob test output in RPC-SPOOLSS.
      s4-smbtorture: mention job id in GetJob test output in RPC-SPOOLSS.
      s4-smbtorture: create several printjobs during print test in RPC-SPOOLSS.
      s4-smbtorture: add print test to RPC-SPOOLSS-PRINTER as well.
      s3-selftest: move printing config to global section.
      s3-selftest: move printing config to global section.
      s4-smbtorture: activate job control tests against s3 in spoolss tests.
      drsblobs: remove utf8string2 from ForestTrustData.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix drsblobs ndr torture test.
      s3-selftest: add RAP-RPC testsuite for crosschecking RAP and DCERPC calls.
      s3-selftest: enable RAP-RPC test against s3.
      s4-smbtorture: fix include of proto header in main RAP test.
      s3-printing: avoid mixing cups backend code with nt_printing code in cups_pull_comment_location.
      s3-spoolss: return info for the correct printjob in _spoolss_GetJob().
      s4-smbtorture: fail spoolss test on SetJob failure.
      s4-smbtorture: more JobInfo testing.
      s3-selftest: set "lpq cache time = 0" in server configuration.
      s3-selftest: set "lpq cache time = 0" in server configuration.
      s4:torture/rpc/atsvc.c: add explicit check for NTSTATUS r.out.result
      s4:torture/ntp: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/unixinfo.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/eventlog.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/session_key.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/testjoin.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/remote_pac.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/schannel.c: add explicit check for NTSTATUS r.out.result
      s4:torture/libnet:add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/lsa_lookup.c:add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/netlogon.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samlogon.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samr_accessmask.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/handles.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samr.c: add explicit check for NTSTATUS r.out.result
      s4:libcli/util/clilsa.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/samba3rpc.c: add explicit check for NTSTATUS r.out.result
      s4-smbtorture: fix two context arguments in RPC-SAMSYNC test.
      s4-smbtorture: fix correct result error code in SetForm spoolss test.
      s4-smbtorture: more work on forms tests in RPC-SPOOLSS.
      s4-smbtorture: avoid passing down a full test_spoolss_context to directory
      s4-smbtorture: merge badname spoolss openprinter tests.
      s4-smbtorture: test all types and also use a wellknown builtin form name in RPC-SPOOLSS.
      s3-rpcclient: allow to define server_unc in cmd_srvsvc_srv_query_info().
      s4-smbtorture: test for invalid form flags in RPC-SPOOLSS.
      s3-spoolss: Fix potential memleak in _spoolss_AddForm and _spoolss_SetForm.
      s3-spoolss: Fix some issues in _spoolss_AddForm.
      s3-spoolss: Fix an issue in _spoolss_DeleteForm.
      s4-smbtorture: minor typo in SetJob test in RPC-SPOOLSS.
      s4-smbtorture: minor cleanup, use data_blob_talloc_zero() in RPC-SPOOLSS.
      s4-smbtorture: add PrinterInfo level 2 / winreg consistency test.
      s4-smbtorture: protect against full UNC paths in winreg printerinfo test.
      s3-registry: fix fill_in_printer_values() for datatype and printprocessor.
      s3-lanman: use spoolss for api_WPrintQueueCtrl().
      s3-lanman: use spoolss for api_RDosPrintJobDel().
      winreg: fill in some winreg IDL gaps.
      s3: re-run make samba3-idl.
      winreg: add IDL for winreg_DeleteKeyEx.
      s3: re-run make samba3-idl.
      s3-winreg: add winreg_DeleteKeyEx stub.
      s4-winreg: add winreg_DeleteKeyEx stub.
      s4-smbtorture: more work on registry REG_LINK (in-registry symlinks) test.
      winreg: keytype options is a bitmask.
      s3: re-run make samba3-idl.
      s4-smbtorture: winreg keytype options is a bitmask.
      s4-smbtorture: when creating winreg-symlinks during a test, it is very wise to make them volatile.
      winreg: rename winreg_KeyType to winreg_KeyOptions.
      s3: re-run make samba3-idl.
      s4-winreg: Fix dcesrv_winreg_CreateKey after rename.
      s4-smbtorture: Fix winreg test after keytype renameing.
      s4-smbtorture: fix build after winreg IDL renames, sorry..
      s4-smbtorture: add test to check for registry symlinks in RPC-SPOOLSS-PRINTER.
      s3: add iconv_convenience handle to pull/push sz helpers.
      winreg: fill in IDL for winreg_QueryMultipleValues2.
      winreg: move REG_OPTION_NON_VOLATILE out of option bitmask.
      s4-smbtorture: display helpful error message when winreg_QueryMultipleValues fails.
      s3: re-run make samba3-idl.
      s3-spoolss: Fix two uninitialized vars in spoolss util code.
      s4-smbtorture: make sure to check for result of spoolss_GetJob tests.
      s4-smbtorture: skip winreg symlink test against Samba in RPC-SPOOLSS.
      spoolss: make spoolss_SetPrinterInfo0 match changes in spoolss_PrinterInfo0.
      s3: re-run make samba3-idl.
      s3-lanman: use spoolss for api_WPrintJobEnumerate().
      s3-lanman: use spoolss for api_WPrintJobGetInfo().
      spoolss: move up enum spoolss_Build in the IDL.
      s3-spoolss: fix samr_ValidatePassword_Change.
      s3-smb2: fix some c++ warnings.
      s3-spoolss: avoid passing down full "struct pipes_struct".
      s3-spoolss: fix winreg spoolss helper call documentation.
      s4-smbtorture: add test for csetprinter field behaviour in printer info level 0.
      s4-smbtorture: refactor test_GetPrinterDriver2().
      s4-smbtorture: simplify macros used in PrinterInfo winreg consistency teste.
      s4-smbtorture: add function to get a printserver's environment.
      s4-smbtorture: add spoolss DriverInfo and winreg consistency test.
      spoolss: pretty-print a struct spoolss_Time.
      s4-smbtorture: rework EnumPrinterDrivers tests a bit.
      s4-smbtorture: add RPC-SPOOLSS-DRIVER test.
      s4-smbtorture: allow to upload and later remove printer driver files in RPC-SPOOLSS-DRIVER.
      s4-smbtorture: test both 32bit and 64bit driver uploads in RPC-SPOOLSS-DRIVER.
      s3-spoolss: fix some crash bugs and missing error codes in AddDriver paths.
      s4-smbtorture: samba currently supports level 3 and 6 driver adds.
      s4-smbtorture: fix test_EnumPrinterDrivers_findone().
      s3-spoolss: make sure AddPrinterDriver calls into AddPrinterDriverEx.
      s4-smbtorture: allow to upload or remove any file belonging to a driver.
      s3-spoolss: make switch in _spoolss_AddPrinterDriver() a bit more clear.
      s4-smbtorture: use server_name for all printerdriver delete and enum operations.
      s3-winbind: fix setup_domain_child() callers.
      s3-selftest: add print$ share with two arch dirs.
      s3-selftest: add print$ share with two arch dirs.
      s4-smbtorture: skip tests when no local driver directory is around.
      s3-selftest: enable RPC-SPOOLSS-DRIVER against s3.
      s3-lanman: fix uninitialized variable in api_RDosPrintJobDel().
      s4: rename RAP share_enum_info to share_info.
      rap: add rap idl.
      s3: re-run make samba3-idl and add generated header file.
      s4: use generated rap header.
      s3: use generated rap header.
      s3: fix some build warnings.
      s4: fix some build warnings.
      s3: remove unused rap.h.
      s4: remove unused rap.h.
      s4-smbtorture: remove some typecasts in rap tests.
      registry: add some shared registry helper functions.
      s4: use shared registry functions.
      s3: use shared registry functions.
      s4-smbtorture: finally test REG_MULTI_SZ in winreg/driverinfo consistency tests.
      s4-smbtorture: split RPC-SPOOLSS-PRINTER into more tests.
      s4-smbtorture: use a torture_printer_context and upload own driver for RPC-SPOOLSS-PRINTER test.
      s4-smbtorture: setup all members of level 3,4,6,8 driver add.
      s4-smbtorture: make sure to not attempt to remove a driver file twice.
      s4-smbtorture: mention architecture of added drivers in debug output.
      s4-smbtorture: only compare level 3 for s3 when checking winreg and spoolss_Driver.
      s4-smbtorture: upload the full cups driver, otherwise windows will not allow using it.
      s3-spoolss: fix some uninitialized variables.
      s3-spoolss: fix winreg attribute for storing datatype.
      s3-spoolss: publish "Monitor" in winreg for drivers.
      s4-smbtorture: make sure to zero the add driver info 8 struct before adding drivers.
      Revert "s3-build: Remove --enable-merged support."
      s3-lanman: remove unsupported print_job_set_place().
      s3-spoolss: add support for SetJobInfo level 1 (for jobfile rename).
      s4-smbtorture: be more liberal when spoolss_SetJob fails.
      s4-smbtorture: allow to pass down spoolss_JobInfoContainer to SetJob functions.
      s4-smbtorture: also try renaming jobname in test_DoPrintTest_check_jobs().
      s3-lanman: use spoolss for api_PrintJobInfo().
      s3-lanman: use spoolss for api_DosPrintQGetInfo and api_DosPrintQEnum.
      s3-lanman: remove unused code.
      s3-lanman: remove a unnecessary memset in api_WPrintJobEnumerate().
      s3-lanman: fix debug message in api_WPrintJobEnumerate().
      s3-lanman: use spoolss for api_WPrintDestGetInfo() and api_WPrintDestEnum().
      s4-smbtorture: start on a test to verify how SetPrinter changes DsSpooler Printer Data.
      s4-smbtorture: add a test that adds a printer incl. devicemode.
      s4-smbtorture: when comparing PrinterData from DsSpooler and PrinterInfo also
      rap: add rap_NetPrintQEnum to IDL.
      s3: re-run make samba3-idl
      s4-smbtorture: add smbcli_rap_netprintqenum.
      s4-smbtorture: add RAP-PRINTING suite.
      s4-smbtorture: add test for rap_NetPrintQEnum.
      s4-smbtorture: link in ../../librpc/gen_ndr/ndr_rap.o.
      s3-lanman: support level 0 NetPrintQEnum RAP query.
      s3-selftest: enable RAP-PRINTING against s3.
      s4-selftest: skip RAP-PRINTING tests.
      s4-rap: add rap print helpers.
      s3-lanman: fix api_DosPrintQEnum.
      s3-pdb_ldap: fix memleak.
      s4-smbtorture: add NDR_PRINT macros for RAP tests (when called with -d10).
      s4-smbtorture: implement and test level 3 and 5 of PrintQEnum RAP.
      rap: fill in rap_PrintQueue2 IDL.
      s4-smbtorture: rework smbcli_rap_netprintqenum a bit.
      rap: add rap_NetPrintQGetInfo to IDL.
      s4-smbtorture: add smbcli_rap_netprintqgetinfo().
      s4-smbtorture: add test_netprintqgetinfo to RAP-PRINTING.
      s3-lanman: fix api_DosPrintQGetInfo().
      rap: add IDL for NetPrintJob{Pause,Continue,Delete}.
      s4-smbtorture: add smbcli_rap_netprintjob{pause,continue,delete}.
      s4-smbtorture: add test_netprintjob() to RAP-PRINTING.
      rap: fix some rap_PrintQueue IDL structures.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix parsing of rap_pull_rap_PrintQueue1 and rap_pull_rap_PrintQueue2.
      rap: fix jobinfo IDL.
      s3: re-run make samba3-idl.
      rap: fill in rap_PrintQueue4 IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: add rap_pull_rap_PrintQueue2.
      s4-smbtorture: add rap_pull_rap_PrintQueue4.
      s4-smbtorture: test all levels in test_netprintqgetinfo and test_netprintqenum.
      rap: use astring in IDL.
      s3: re-run make samba3-idl.
      rap: let the rap print function be autogenerated again.
      rap: fix rap_PrintQueue2 and rap_PrintQueue4.
      s3: re-run make samba3-idl.
      s4-smbtorture: fix rap_pull_rap_PrintQueue2 and 4.
      rap: add IDL for rap_NetPrintQueue{Pause,Continue,Purge}.
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintqueuepause().
      s4-smbtorture: add test_netprintq to RAP-PRINTING.
      s4-smbtorture: add smbcli_rap_netprintqueueresume() and smbcli_rap_netprintqueuepurge().
      rap: add rap_status to IDL.
      rap: use rap_status in IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: use rap_status in smbcli_rap_* functions.
      s4-smbtorture: pause and resume printq in RAP-PRINTING test.
      s3: add rap_NetPrintJobEnum (again a call not documented in MS-RAP).
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintjobenum().
      s4-smbtorture: add test_netprintjobenum to RAP-PRINTING.
      s4-smbtorture: fix smbcli_rap_netprintjobenum().
      rap: add rap_NetPrintJobGetInfo to IDL.
      s3: re-run make samba3-idl.
      s4-smbtorture: add smbcli_rap_netprintjobgetinfo().
      s4-smbtorture: add test_netprintjobgetinfo().
      rap: add rap_NetPrintJobSetInfo to IDL.
      s3: re-run make samba3-idl.
      s3-lanman: exit early for unsupported levels in api_PrintJobInfo().
      s4-smbtorture: add rap_cli_push_param() and rap_cli_push_sendbuf().
      s4-smbtorture: add smbcli_rap_netprintjobsetinfo().
      s4-smbtorture: add test_netprintjobsetinfo to RAP-PRINTING.
      pidl: indent cosmetics for s3 server stubs.
      s3: re-run make samba3-idl.
      s3-lanman: fix api_DosPrintQEnum().
      s3-rpcclient: Fix Bug #7277. rpcclient was sending invalid data, causing cupsaddsmb to fail.
      s3-lanman: before trying to call spoolss_ClosePrinter make sure we have a connection.
      s4-smbtorture: make all smbcli_rap_* failures critical.
      s4-smbtorture: add rap_cli_expect_extra_format().
      s4-smbtorture: use RAP extraformat for smbcli_rap_netprintqenum().
      s4-smbtorture: add extraformat to smbcli_rap_netprintqgetinfo() as well.
      rap: add IDL for (undocumented) NetPrintDestEnum.
      s4-smbtorture: add smbcli_rap_netprintdestenum.
      rap: add rap_NetPrintDestGetInfo to IDL.
      s4-smbtorture: add test_netprintdestenum to RAP-PRINTING.
      s4-smbtorture: add smbcli_rap_netprintdestgetinfo().
      s4-smbtorture: add test_netprintdestgetinfo() to RAP-PRINTING.
      s3-libnetjoin: omit admin password in generated ndr_print function.
      s4-smbtorture: fill in test_rap_print().
      rap: add IDL for rap_NetShareAdd (undocumented in MS-RAP).
      s4-smbtorture: remove unused variable from smbcli_rap_netprintdestgetinfo().
      s3-net: fix crash in rap_share_add().
      s3-spoolss: talloc_steal the returned driver_list in winreg_get_driver_list().
      s3-spoolss: make sure to return success in winreg_get_driver_list() for a
      s3-spoolss: remove unused winreg_enumval_to_blob().
      s3-lanman: use srvsvc for api_RNetShareAdd().
      s3: only include gen_ndr headers where needed.
      s3-build: fix the build of vfs_notify_fam.
      s3-eventlog: move all eventlog headers to lib/eventlog and only include where required.
      s3-spoolss: make several notify functions static.
      s3-passdb: moving account_pol.c into passdb.
      s3: move BASE_RID to main includes.h (in preparation to separate passdb).
      rap: add rap_NetUserPasswordSet2() to IDL.
      s4-smbtorture: add smbcli_rap_netuserpasswordset2().
      pidl: add NDR_PRINT_DEBUG output to generated s3 server dispatch tables.
      s3-libsmb: fix argument order for tevent_req_default_print in cli_pull_print().
      s3-lanman: use srvsvc for api_RNetServerGetInfo().
      s3-proto: add missing protoype for dcerpc_fault_to_nt_status().
      s3-net: Fix Bug #7417. 'net rpc user password' can set the wrong password.
      testprogs: rename spoolss.exe to testspoolss.exe.
      testprogs: add vcproj and sln files for testspoolss.exe.
      testprogs: add readme for testspoolss.exe.
      testprogs: update README to reflect the util rename.
      testprogs: update Makefile.mingw (although mingw current cant build it).
      s3-rpcclient: fix two more invalid typecasts in spoolss commands.
      rap: add rap_NetOEMChangePassword() to IDL.
      s4-smbtorture: add smbcli_rap_netoemchangepassword().
      s4-smbtorture: correctly fill in trans.in.data in rap_cli_do_call().
      s4-smbtorture: fix smbcli_rap_netoemchangepassword.
      s4-smbtorture: fix smbcli_rap_netuserpasswordset2().
      tdb: remove unused variable in tdb_new_database().
      s4-smbtorture: test netservergetinfo level 1 also against s3.
      s4-smbtorture: autolookup domain in torture_create_testuser() if none was given.
      s4-smbtorture: add torture_create_testuser_max_pwlen() that allows to set maxpwlen.
      s4-smbtorture: getting serious about checking rap status return codes.
      s4-smbtorture: add RAP-SAM testsuite with a rap_NetUserPasswordSet2 test.
      s3-selftest: enable RAP-SAM against Samba 3.
      s4-selftest: skip RAP-SAM tests against Samba 4.
      s4-smbtorture: add test_oemchangepassword to RAP-SAM.
      s4-smbtorture: create/delete testusers via SAMR in RAP-SAM.
      s3-lanman: use samr for api_SamOEMChangePassword().
      s3-rap: fix cli_oem_change_password() and give room for the convert reply word.
      s3-libndr: make sure ndr_pull_string_array() only inspects string termination flags.
      s3-libsmb: fix typo in remote_password_change().
      ntprinting: add ntprinting.idl.
      s3-printing: explicitly include "printing/pcap.h" as there is /usr/include/pcap.h.
      s4-libndr: fix ndr_pull_string_array() for non utf16 arrays in s4 as well.
      s3-winbind: make the getpeername() checks in cm_prepare_connection IPv6 aware.
      s3-kerberos: pass down kdc_name to create_local_private_krb5_conf_for_domain().
      s3-kerberos: temporary fix for ipv6 in print_kdc_line().
      s3-includes: remove some unused defines.
      s3-libgpo: move group policy protos to where they belong.
      s3-rpc_misc: clean out include/rpc_misc.h.
      security: merge builtin rid tables.
      s3-services: move services.h to where it is actually used.
      s3-samr: move samr helper prototypes outside of proto.h
      s3-crypto: only include crypto headers when crypto is done.
      s3-includes: remove completely unused util_getent.h header.
      s3-tldap: only include tldap when actually needed.
      s3-registry: only include registry headers when really needed.
      smbconf: only include smbconf headers where needed.
      s3-build: fix the build.
      s3-secdesc: remove "typedef struct sec_desc_buf SEC_DESC_BUF".
      s3-secdesc: remove "typedef struct security_ace SEC_ACE".
      s3-secdesc: remove "typedef struct security_acl SEC_ACL".
      s3-secdesc: remove "typedef struct security_descriptor SEC_DESC".
      s3-secdesc: move SEC_DESC_HEADER_SIZE to its only user.
      s3-secdesc: use SD_REVISION from security.idl.
      s3-net: Added a rather trivial "net printing dump" command.
      s3-net: also dump security descriptors from ntprinters.tdb in "net printing dump".
      s3-pidfile: set the close on exec flag for the created pidfiles.
      s3-rpc_client: move protos to cli_samr.h
      s3-rpc_client: move protos to cli_netlogon.h
      s3-rpc_client: move protos to cli_lsarpc.h
      s3-rpc_client: move protos to cli_spoolss.h
      s3-rpc_client: move protos to init_spoolss.h
      s3-rpc_client: move protos to init_samr.h
      s3-passdb: move get_logon_hours_from_pdb() into samr server.
      s4-smbtorture: take a TODO note for RAP-PRINTING.
      s3-lanman: Fix various RAP printing calls according to win98 testing and MS-RAP docs.
      s3-services: move services.h closer to services implementation.
      s3-build: add missing prototype for regtype_by_string().
      s3-libndr: merge in better ndr warnings from s4 ndr_string.c
      librpc: finally merge ndr_string.c.
      s3-utils: remove trailing whitespace from profiles utility.
      s3-registry: support REG_QWORD.
      s3-registry: support REG_DWORD_BIG_ENDIAN.
      s3-net: compile net_ads_gpo_apply().
      s3-net: let net_ads_gpo() call no_ads when built w/o ads support.
      s3-net: show how to use filters for group policy processing.
      s3-libads: add ads_set_sasl_wrap_flags().
      s3-libgpo: enable LDAP sign in ads_get_gpo_list().
      s4-smbtorture: use push_reg_sz()/push_reg_multi_sz() in RPC-WINREG.
      s4-smbtorture: print local_machine name in RemoteFindFirstPrinterChangeNotifyEx test.
      s4-smbtorture: pass down hkey to main keytest in RPC-WINREG.
      s4-smbtorture: use push_reg_sz/push_reg_multi_sz in spoolss tests.
      waf: fix the build of nsswitch libwbclient.
      s4-smbtorture: Fix volatile test in RPC-WINREG.
      s4-smbtorture: add kernel_mode_registry_path().
      s3-net: fix net_ads_gpo() for non-ads case.
      rap: fix rap_NetUserPasswordSet2 IDL.
      s4-smbtorture: fix smbcli_rap_netuserpasswordset2().
      s4-smbtorture: Fix NetUserPasswordSet2 RAP tests.
      s3-waf: very simple start on getting krb5 build to work.
      s3-net: fix a "dereferencing type-punned pointer will break strict-aliasing rules" warning.
      s3-printing: fix buildwarning in publishing code after registry changes.
      s3-lanman: use samr for api_SetUserPassword().
      s3-lanman: parse encrypted and min_pwd_length in api_SetUserPassword().
      s3-smbd: remove unused change/check_lanman_password.
      s3-samr: move chgpasswd.c out of smbd and into the samr server.
      rap: add rap_NetUserGetInfo IDL.
      s4-smbtorture: add smbcli_rap_netusergetinfo().
      s3-waf: fix the build after chgpasswd.c changes.
      rap: fix typo in IDL.
      s3-lanman: remove defines now provided by IDL.
      s3-waf: more work on krb5 build.
      rap: use rap_LogonHours in rap_NetUserInfo11 as well.
      s4-smbtorture: add usergetinfo to RAP-SAM.
      s3-net: fix the build.
      s4-smbtorture: create the user to test in test_usergetinfo() in RAP-SAM.
      s3-lanman: use samr for api_RNetUserGetInfo.
      s3-waf: fix the build after tstream changes.
      libndr: add support for relative_rap_convert.
      s4-smbtorture: we can fully use autogenerated code to pull info unions now.
      s4-smbtorture: remove obsolete handmarshalled rap code.
      s4-smbtorture: finally test all levels in rap_NetUserGetInfo RAP-SAM test.
      s3-rpc_client: move protos to init_netlogon.h
      s3-idl: fix some missing dependencies to other IDL files.
      s3-build: only use ndr_samr.h where needed.
      s3-build: use ndr_misc.h where needed.
      s3-build: remove duplicate ndr_krb5pac.h inclusion.
      s3-auth: fix c++ buildwarnings.
      s3-lanman: Fix api_RNetUserGetInfo level 2 marshalling offset calculation.
      s3-samr: Fix crash bug in _samr_QueryUserInfo{2} level 18.
      s3-selftest: make sure provisioned s3 looks the same in make selftest as in make test.
      s3-selftest: fix chmod commands in provisioning.
      libcli/nbt/lmhosts: fix missing prototype warning.
      s3-build: only use ndr_security.h where needed.
      s3: only use netlogon/nbt header when needed.
      s3: use shared security defines.
      s3-netlogon: use SAMR in _netr_ServerPasswordSet{2}.
      s3-auth: add "system" bool flag to auth_serversupplied_info.
      s3-samr: give the system user a free pass for _samr_QueryUserInfo{2} level 18.
      s3-netlogon: use SAMR in _netr_ServerAuthenticate3.
      s3-netlogon: use LSA in _netr_NetrEnumerateTrustedDomains.
      s3-netlogon: Fix crash bug in _netr_NetrEnumerateTrustedDomains().
      s3-smbd: remove unused sconn from token_contains_name().
      lib/replace: fix some c++ build warnings in testsuite.
      s4-smbtorture: Make sure RPC-SPOOLSS and RPC-SPOOLSS-PRINTER pass against s3.
      s4-smbtorture: skip driverName and printerName DsSpooler tests for now.
      s3-eventlog: try to pass RPC-EVENTLOG during make test as non-root.
      s3-selftest: Fix blackbox smbclient s3 tests during make selftest.
      s3: remove unused librpc/ndr/sid.c.
      s3-security: remove some more shared secdesc defines.
      s3-security: use shared SECINFO_OWNER define.
      s3-security: use shared SECINFO_GROUP define.
      s3-security: use shared SECINFO_SACL define.
      s3-security: use shared SECINFO_DACL define.
      s3-security: remove duplicate Extra W2K flags.
      s3-security: move ALL_SECURITY_INFORMATION to the only user.
      s3-security: use shared Security Access Masks Rights.
      s3-security: use shared "Generic access rights".
      s3-security: use shared "File Object specific access rights".
      security: move generic_mapping and standard_mapping to security.idl.
      s3-security: use shared "Standard access rights.".
      s3: remove rpc_secdes.h completely.
      s3-build: only include generated spoolss headers (not ndr headers).
      s3-build: pure cosmetics, use better names for gen_ndr code pieces.
      s3: remove authdata.h
      s4-smbtorture: only test data up to a length of 9 bytes in test_SetPrinterDataEx_matrix().
      s4-smbtorture: refactor test_EnumPrintProcessors().
      s4-smbtorture: add test_PrintProcessors_winreg.
      s4-smbtorture: move PrintProcessors winreg test to main RPC-SPOOLSS test.
      s3-spoolss: add and use spoolss_printerinfo2_to_setprinterinfo2().
      s4-smbtorture: allow to call single tests from a testcase in a testsuite
      s4-smbtorture: convert RPC-SPOOLSS into a torture suite.
      s4-smbtorture: rework order of test in RPC-SPOOLSS-PRINTSERVER a bit.
      s4-smbtorture: completely rework RPC-SPOOLSS-PRINTER.
      s3-selftest: do not call main RPC-SPOOLSS testsuite.
      s4-smbtorture: check error codes in RAP-SAM testsuite.
      s3-rpcclient: allow to add access_mask in cmd_spoolss_open_printer_ex().
      s4-smbtorture: share test_ClosePrinter between RPC-SPOOLSS and RPC-SPOOLSS-WIN.
      s4-smbtorture: add RPC-SPOOLSS-ACCESS.
      s4-smbtorture: remove another incarnation of test_ClosePrinter.
      s4-smbtorture: make RPC-SPOOLSS-ACCESS more compatible with older samba releases.
      s3-privileges: use LUID defines from lsa IDL.
      s4-smbtorture: handle printservers w/o printers in RPC-SPOOLSS-ACCESS.
      s4-smbtorture: test workstation auth as well in RPC-SPOOLSS-ACCESS.
      s3-lsa: Fix static list of luids in our privileges implementation.
      s3-waf: fix the the waf build.
      s3-netdomjoin-gui: Fix Bug #7500. Fix 'not a string literal' warning in netdomjoin-gui.
      s3-selftest: disable domain creds smbclient_s3 tests for now.
      s4-smbtorture: rework internals of RPC-SPOOLSS-ACCESS testsuite.
      s3-auth: Fix valgrind warning (unitialized var) in samu_to_SamInfo3().
      s3-waf: fix the build.
      s3-printing: add BUILTIN\Print Operators as FULL CONTROL to default sd.
      s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo().
      s4-smbtorture: test smbcli_rap_netprintqgetinfo() with "" printqname.
      s3-lanman: Fix return code for "" printqname in api_DosPrintQGetInfo().
      pidl: make sure to fill in cli->pipes_struct->hdr_req.opnum in s3 server dispatch tables.
      Revert "s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo()."
      s4-smbtorture: only pull info when status code indicates success in smbcli_rap_netprintqgetinfo().
      s3-auth: fix debug message in check_winbind_security().
      ntlmssp: add decode_NTLMv2_RESPONSE to IDL.
      s3-build: allow to build bin/ndrdump4 (just as bin/smbtorture4)
      s3-auth: in make_user_info_for_reply_enc make sure to check length and data
      s3-docs: Fix some of ntlm_auth ntlm-server-1 protocol documentation.
      s4-smbtorture: Remind myself we need to add a test for SMBsplretq in RAP-PRINTING.
      lib/crypto: only include what is needed.
      s3-selftest: fix locktest9 in make selftest.
      s4-smbtorture: split out a "printerdata_keys" test for RPC-SPOOLSS-PRINTER.
      s4-smbtorture: activate all keys in SetPrinterData keys test.
      s4-smbtorture: also test keynames with '/' in it in SetPrinterDataEx keyname tests.
      s4-smbtorture: add "printerdata_values" test to RPC-SPOOLSS-PRINTER.
      s4-smbtorture: Fix test_SetPrinterDataEx_keys and test_SetPrinterDataEx_values.
      s4-smbtorture: add test for different winreg SetValue value names.
      s4-smbtorture: more work on test values WINREG test.
      s4-smbtorture: test more valid key names in RPC-WINREG.
      s3-eventlog: make sure _eventlog_OpenEventLogW fails when we cannot open the registry key.
      s3-registry: fix perfmon keyname delimiter.
      s3-registry: fix printing keyname delimiter.
      s3-registry: missed one perflib keyname delimiter.
      s4-smbtorture: add trustDomainPasswords blob test to LOCAL-NDR testsuite.
      s4-smbtorture: fix typo.
      winreg: fix winreg_QueryMultipleValues() IDL and torture tests.
      winreg: fix winreg_QueryMultipleValues2 IDL.
      s4-smbtorture: add RPC torture test for winreg_QueryMultipleValues2.
      s4-smbtorture: add NDR torture test for winreg_QueryMultipleValues2.
      s3-utils: remove rpccheck.
      s4-smbtorture: add netr_GetForestTrustInformation test to RPC-NETLOGON.
      s4-smbtorture: use TEST_MACHINE_NAME in test_netr_GetForestTrustInformation().
      s4-smbtorture: handle NT_STATUS_NOT_IMPLEMENTED in GetForestTrustInformation test.
      s4-smbtorture: remove some pointless mem_equal tests in LOCAL-NDR-WINREG testsuite.
      s4-smbtorture: add more sophisticated tests for winreg_QueryMultipleValues{2}.
      s4-smbtorture: fix incorrect IDL for QueryMultipleValue (aka RVALENT).
      s4-smbtorture: remove duplicate torture_assert_sid_equal macro.
      s4-smbtorture: add some more multiple_values_tests to RPC-WINREG.
      s3-registry: add reg_querymultiplevalues() to reg_api.
      s3-winreg: implement _winreg_QueryMultipleValues2().
      s3-winreg: implement _winreg_QueryMultipleValues().
      s4-smbtorture: enable QueryMultipleValues{2} torture tests against samba3.
      s3-libsmb: move change_trust_account_password out of smbd into libsmb.
      s3-docs: try to make "default case" explanation a little clearer.
      s4-smbtorture: in extended setvalue winreg test, reduce max random buffer length to 16 bytes.
      s3-registry: fix malloc/talloc mismatch upon free in reg_enumvalue().
      s3-printing: Fix Bug #7541, %D in "printer admin" causing smbd crash.
      s3-libads: move KRB5_ENV_CCNAME to separate header krb5_env.h.
      s3-libads: use shared well known guids.
      s3-libnet_join: small IDL enhancement.
      tdb: fix the build on mac os x 10.6.4.
      s3-waf: fix the build after smbd/change_trust_pw.c removal.
      s3-libads: move ads_protos.h to ads_ldap_protos.h.
      s3-libads: move ads_status to a separate header file.
      s3-libads: move ads_dns out of main includes.
      s3-libads: move keytab macros out of ads.h.
      s3-libads: only include libds flags where needed.
      s3-libads: move spnego defines to their appropriate header file.
      s3-libads: move ldap posix schema defines to their own header file.
      s3-nss_info: only include nss_info.h where needed.
      s3-registry: avoid using registry_value union.
      s3-registry: remove unused reg_util_marshalling code.
      s4-smbtorture: enable extended SetValue test against Samba3.
      s3-registry: allow to read NULL entries (that we allow to store) back from the tdb.
      s3-registry: remove 2 byte winreg type limitation.
      s3-net: forgot to set type in winreg getvalue operation.
      s3-idl: support --full for s3 build_idl.sh as well.
      s3-build: add idl_full to Makefile.
      s3-waf: fix the build.
      s4-smbtorture: add my (C) to rap torture lib.
      pidl: s3 server stubs: make sure LIBNDR_FLAG_BIGENDIAN is set when negotiated.
      s3-winbind: Fixed the winbind caching.
      s3-selftest: add "make testenv" target to Makefile.
      s3-build: add IDL_FILES variable.
      s3-build: some makefile cosmetics.
      s3-notify: add MS-CIFS FILE_NOTIFY_INFORMATION to IDL.
      s3-notify: use autogenerated FILE_NOTIFY_INFORMATION marshalling in smbd.
      s3-rpc_parse: fix c++ buildwarning in prs_init().
      s3-registry: add preg.idl.
      s3-libgpo: remove handmarshalled PReg parser from registry CSE.
      s3-rpc_parse: remove finally unused prs_unistr().
      s3-rpc_misc: remove unused UNISTR.
      s3-winbindd: route samr chgpwd ops for own domain over internal samr pipe as well.
      s3-winbindd: Fix child logfile handling which broke with c67cff0372.
      s3-dcerpc: add dcerpc_push_ncacn_packet().
      s3-dcerpc: use dcerpc_push_ncacn_packet() for setup_bind_nak().
      s3-dcerpc: use dcerpc_push_ncacn_packet() for setup_fault_pdu().
      s3-dcerpc: add dcerpc_pull_ncacn_packet().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() for pulling a RPC fault pdu.
      s3-dcerpc: remove unused smb_io_rpc_hdr_fault.
      s3-dcerpc: use dcerpc_push_ncacn_packet() for create_bind_or_alt_ctx_internal().
      s3-dcerpc: remove unused init_rpc_hdr_rb and init_rpc_context.
      s3-dcerpc: add dcerpc_push_dcerpc_auth().
      s3-dcerpc: add dcerpc_push_schannel_bind().
      s3-dcerpc: use dcerpc_push_dcerpc_auth() for all authenticated binds.
      dcerpc: add ncacn_packet_header to IDL.
      s3-dcerpc: add dcerpc_pull_ncacn_packet_header().
      s3-dcerpc: use struct ncacn_packet_header instead of struct rpc_hdr_info.
      s3-dcerpc: add dcerpc_pull_dcerpc_auth().
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in cli_pipe_verify_ntlmssp().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() in cli_pipe_validate_current_pdu().
      s3-dcerpc: use dcerpc_push_ncacn_packet() in push_next_frag().
      s3-dcerpc: use dcerpc_pull_ncacn_packet() for rpc_pipe_bind_step_one_done().
      Revert "s4-smbtorture: skip bigendian tests against s3 in RPC-LSA-SECRETS."
      s3-rpcclient: add another usage display to sign and seal commands.
      s4-smbtorture: skip wbcChangeUserPassword test when no oldpass is set in environment.
      s3-rpc: when using rpc_pipe_open_internal, make sure to go through NDR.
      s4-dcerpc: move some util functions up to main librpc directory.
      s3-dcerpc: link against ../librpc/rpc/dcerpc_util.c
      s3-ldb: fix build warning.
      s3-waf: fix the build.
      s3-libnet: better separate headers.
      s3-libnet: add missing header file, sorry.
      s4-smbtorture: rename rpc/bind.c to rpc/multi_bind.c.
      s4-smbtorture: add very simple RPC-BIND testsuite.
      s3-selftest: enable RPC-BIND against s3.
      s3-dcerpc: fix crash bug in error path of process_complete_pdu().
      s3-dcerpc: fix c++ warning.
      s3-waf: fix the build.
      s3-registry: use some prs macros to the only place where they are used.
      libcli/netlogon: re-enable debugging.
      s4-smbtorture: make sure to wipe out dcerpc auth flags before RPC-BIND starts.
      s4-smbtorture: rearrange testlist in RPC-BIND.
      s4-smbtorture: run all testcases with bigendian push as well in RPC-BIND.
      s3-perfcount: make it possible to compile the example perfcount daemon.
      s3-dcerpc: rename SCHANNEL_SIG_SIZE to NL_AUTH_SIGNATURE_SIZE and move to IDL.
      s3-build: add LIBNDR_XATTR_OBJ.

Holger Hans Peter Freyther (1):
      talloc: Documentation fix for talloc

Holger Hetterich (30):
      s3: eventlogadm.c: add -s option to use alternative config file.
      s3: vfs_full_audit.c: implement negated vfs_ops in the success/failure list
      s3: net_share.c: fix argc handling
      Introduce smb_traffic_analyzer protocol v2.
      Create structs carrying the data of individual VFS functions, and hand those over to the send function, which then casts the void pointer to the struct required by looking at the id. This allows us to return different result data depending on the VFS function that is running. Make the protocol v1 sender compatible to this. Adapt the existing VFS functions to use the new data structures. Make use of the new functionality and extend the mkdir VFS logger function to return the creation mode additionally.
      The format of data we are sending over the network will be flexible when sending over the network in protocol v2. To be able to do this, we create a new va-list function that is creating the buffer to send. Also it makes it easier for the receiver to parse the data; it sends an initial header containing the full length of the buffer to be send. For the individual strings, it sends sub headers containing the length of the upcoming substring to be send. With the header-data-header-data [..] structure we don't need to quote the sub strings finally enabling having all possible character sets in filenames etc..
      Add rmdir, chdir, and rename as supported VFS functions
      Enable AES encryption of the data if a key was found in secrets.tdb.
      Add read,pread,write,pwrite support to the V2 protocol.
      Don't use typedefs on the VFS function data structures as
      According to the linux kernel coding styleguide, it's better to
      Additionally send the vfs function id with the protocol.
      Fetch the SID of the user we are running as and send with the common
      Move the creation of the header.
      Added an exact description of the V2 protocol.
      Make all remarks compatible to the linux kernel coding styleguide.
      Implement anonymization for protocol v2.
      Implement AES encryption of the data block.
      Add smbta-util to manage the encryption key.
      Put all the protocol stuff into a separate header file.
      Add the number of common data blocks to the protocol.
      Update the manpage of vfs_smb_traffic_analyzer and add smbta-util.
      Simplify the code a bit by creating the functions:
      vfs_smb_traffic_analyzer.c: added function
      smb_traffic_analyzer.c: optimize marshalling function and document
      s3: vfs_smb_traffic_analyzer.c: add VFS functions for file open and close
      s3: vfs_smb_traffic_analyzer.c: remove warnings from developer build
      Make the smbta-util manpage xml create smbta-util.8 instead of smbta-tool.8
      vfs_smb_traffic_analyzer.c: set the len variable when running protocol v1.
      s3-vfs: Send the share name instead of the path in smb_traffic_analyzer.

Ira Cooper (8):
      s3: Improved support for GAMIN.
      Fix bug #7384 - dptr_Close has a bitmap leak.
      s3: added support for fake oplocks in SMB2.
      SMB2: Fix rename on Windows 7.
      Fix for bug 7501 -  SMB2: CREATE request replies getting mangled.
      s3: Change exit on immediate socket failure.
      s3: Add SMB2 performance counters.
      s3: Cleanup of the initial SMB2 counters patch.

James Peach (12):
      libreplace: Fix readline build with libedit.
      smbtorture: Add list command to smbtorture shell.
      smbtorture: Add history support to shell mode.
      smbtorture: Print global options for interactive "list" command.
      smbtorture: Move interactive shell into a separate file.
      smbtorture: Refactor interactive shell into independent commands.
      smbtorture: Add "auth" command to the shell.
      smbtorture: Enhance shell "help" command.
      smbtorture: Add "target" command to interactive shell.
      smbtorture: Fixx off-by-one command line parsing.
      smbtorture: Fix missing includes.
      smbtorture shell: Allow any config option to be set.

Jeff Layton (7):
      mount.cifs: take extra care that mountpoint isn't changed during mount
      mount.cifs: check for invalid characters in device name and mountpoint
      mount.cifs: don't allow it to be run as setuid root program
      cifs.upcall: allocate a talloc context for smb_krb5_unparse_name
      samba: remove cifs-utils tools from build systems
      samba: remove Linux cifs-utils files from samba master branch
      Update URL in README.cifs-utils

Jeff Morriss (1):
      pidl: Fix display field for time fields with newer versions of Wireshark.

Jelmer Vernooij (298):
      Fix permissions - net subcommand modules don't need to be executable.
      Add script for updating the copy of subunit.
      Add README about subunit.
      subunit: Import new version.
      Import testtools as well, required for subunit.
      subunit/testtools: Include newer version.
      ldap.py: Remove unused imports.
      ldap: Fix test failure that seemed to go unreported previously.
      selftest: Use SUBUNIT_FORMATTER command, if set in the environment.
      s4: Include Python.h early to avoid double definition errors.
      pidl: Include Python.h first, to avoid warnings.
      s4: Fix a few warnings.
      pyxattr: Remove unnecessary hacks.
      pyxattr: Use standard functions for error handling.
      pyxattr: Fix return value, raise exception, fix memory leak.
      pyxattr: Simplify tests.
      pyxattr: Fix memory leaks.
      pyxattr: Fix tests by avoiding opening tdb files multiple times.
      pyxattr: Fix tests by not opening tdb files multiple times.
      pyxattr: Simplify tests.
      selftest: Cope with 'multipart' support in subunit.
      pyxattr: Factor out helper functions.
      pyxattr: Move to the same directory as the xattr code.
      upgrade_from_s3: Remove unused imports.
      s4-python: Fix formatting.
      net: Fix python 2.4 compatibility.
      upgradeprovision: Remove unused imports, use shutil.rmtree rather than
      Fix formatting.
      More formatting fixes.
      getntacl: Remove manpage for removed utility.
      Remove __contains__ from mock object for consistency with actual
      ntacl: Use existing infrastructure.
      Add 'pyflakes' rule.
      General cleanups of python code, hinted by pyflakes.
      python: Add 'make pylint' convenience rule.
      More formatting fixes, pointed out by pylint.
      Add testrepository configuration.
      Fix the build, add filtered subunit runner.
      Remove extension from format-subunit.
      selftest: Remove html subunit formatter; it's too simple and really belongs in subunit or testrepository upstream.
      selftest: Remove unused BuildFarm output file (now using subunit)
      selftest: Update locations in README.
      provision: Remove unnecessary whitespace.
      upgradeprovision: Fix formatting, syntax error.
      s4-python: Format to PEP8, simplify tests.
      s4-python: Move dnspython to lib/, like the other Python modules
      s4-python: Simplify mechanism for finding included Python modules.
      subunit: Update to newer upstream version.
      python: Fix rule for generating docs using pydoctor.
      ldap.py: Fix syntax error.
      registry: Fix compilation.
      selftest: Convert format-subunit to Python.
      selftest: Replace perl subunit formatter with python subunit formatter,
      format-subunit: Improve formatting, simplify code.
      selftest: Remove diff-subunit - it's included in subunit and not necessary for normal operation.
      format-subunit: Avoid printing backtrace on Ctrl-C.
      selftest: Convert filter-subunit to Python so the subunit Python module
      selftest: Use absolute tests names in knownfail.
      s4-selftest: Fix xfail for base.delete.
      selftest: Use standard subunit commands for progress reporting.
      selftest: Support parsing progress in format-subunit/filter-subunit.
      selftest: Use standard subunit command for progress reporting.
      selftest: Use boolean types in Python.
      subunit: Also import copies of filters and perl module.
      smbtorture: Report number of available tests in a testsuite using subunit.
      samba_external: Simplify script to find missing external packages; include subunit and testtools as well.
      Put testtools directly under lib/ to make it easier to install from Samba 4.
      format-subunit: Don't show reason at all if it is None.
      format-subunit: Hide reason if it is None.
      installmisc: Support DESTDIR for Python directories.
      s4-python: Install external included packages only if they're not present on the system.
      testtools: Fix included testtools, for systems that don't have it.
      subunit: Include remainder of bindings and metadata.
      selftest: Make sure format-subunit and filter-subunit can find testtools/subunit.
      selftest: Update sys.path before attempting to import external modules.
      subunitrun: Find testtools and subunit when they're not provided by the
      s4-python: Install external packages to a different directory but import into
      s4-python: Ensure __init__ exists in samba.external, or importing will fail.
      selftest: for clarity, rename test to testsuite
      s4-python: Remove duplicate definition of GUID_DRS_* constants.
      s4-python: Remove unused imports, duplicate definitions of SECINFO_ constants.
      s4-python: Remove remaining constants.
      s4-python: Move dsdb constants to a separate python module.
      s4-python: Move samdb_server_site_name to dsdb module.
      s4-python: Remove convenience macro PyErr_SetStringError.
      s4-python: Avoid importing glue directly.
      s4-python: Move set_opaque_integer -> dsdb.
      s4-python: Move dsdb_convert_schema_to_openldap to dsdb.
      selftest: Remove python2.4-isms
      Add C-based Samba-specific subclass of Ldb.
      Move glue.set_credentials hack to samba.Ldb.
      s4-python: Move set_opaque_integer to pyldb.
      s4-python: Move ldb_set_utf8_casefold to pyldb-samba.
      s4-python: Move register_samba_handlers to PySambaLdb.
      s4-python: Move set_session_info to PySambaLdb.
      s4-python: Fix compilation of samba._ldb.
      s4-python: Use standard infrastructure for finding included testtools, subunit and iso8601.
      Support 'make test TESTS=foo' again.
      urgent_replication: Use standard comments rather than docstrings.
      s4-python: Move samdb_ntds_objectGUID to pydsdb.
      s4-provision: Proper handling of exceptions, use SamDB class but skip global schema.
      s4-samdb: Allow skipping global schema.
      selftest: Display minutes and hours for duration.
      update-external: Support updating dnspython.
      s4: Remove unused pkg-config replacement in perl.
      Move configure_check_unused script to root scriptdir, as it is useful
      s4-waf: Fix 'waf dist' app name.
      s4-waf: Add dist target.
      s4-python: Move set_global_schema to pydsdb.
      s4-net: Simplify SamDB connect code.
      Migrate 'net export keytab' to python.
      Update waf build.
      s4-python: samdb: Default to using global schema.
      s4-waf: Support --load-list option.
      selftest: Support --load-list option.
      selftest: Add --filtered-subunit option.
      testr: Use waf test runner.
      s4-python: Remove obsolete and broken torture modules.
      s4-python: Simplify code, improve formatting.
      s4-python: Fix formatting, import of FLG_NOSYNC.
      s4-python: rename samba.glue to samba._glue to indicate it's private.
      s4-python: More cleanups.
      s4-python: Move load_partition_usn to dsdb module.
      s4-python: Cancel transaction properly in case of exceptions, fix formatting.
      s4-python: Fix formatting, use standard convention to call instance methods.
      pynet: Create a net class.
      s4-net: Use new Net() object in net export keytab.
      net: Convert time command to python.
      s4-net: Convert 'net time' to python.
      s4-net: Convert user subcommand to Python.
      s4-net: Convert vampire command over to Python.
      s4-net: Convert machinepw command to python.
      Support --version in python scripts.
      s4-net: 'net user create' -> 'net user add', for backwards compatibility.
      s4-net: Cope with options without arguments.
      s4-build: Fix autoconf build (net_machinepw.c is no longer present)
      smbtorture: Support --load-list argument.
      smbtorture: Remove unused shell feature.
      torture: Simplify torture suite running, call restricted test suite runner.
      selftest: Support passing --load-list to test runners.
      subunit: Don't abort when receiving test results from tests that weren't
      selftest: Accept 'testing:' to introduce new tests.
      subunit: Support formatting compatible with upstream subunit, for consistency.
      subunit: Remove more test output that could be interpreted by subunit.
      subunit: Cope with lowercase test results in tap2subunit.
      s4: Fix more test results to not conflict with subunit commands.
      idl: Use C-style comments, because cpp on some platforms doesn't accept
      s4-net: Add definition of outf.
      selftest: Cope with strict.
      pydsdb: Fix memory leak on invalid parameters, formatting, trivial
      s3-build: Remove --enable-merged support.
      Remove the copy of ldb from Samba 3.
      samba3: Generate C files from IDL in source3/librpc/gen_ndr rather than
      Revert "Revert "s3-build: Remove --enable-merged support.""
      Reintroduce merged build, using waf to build smbtorture4.
      s3-merged: Use newly added waf reconfigure subcommand.
      s3-merged: Make sure bin/ exists when copying in bin/smbtorture4.
      s3: Work around dependency bug in Samba 4 waf build in merged build.
      s3-selftest: Allow overriding the subunit formatter.
      pynet: Remove unused credentials argument.
      selftest: Cope with testsuites without any output whatsoever (probably an error though).
      selftest: Cope with empty testsuite results in more places.
      Finish removal of iconv_convenience in public API's.
      s3: Remove use of iconv_convenience.
      Remove more usages of iconv_convenience in files which were apparently not recompiled by waf.
      s3: Fix some more iconv convenience usages.
      pynet: Raise proper exceptions rather than invoking sys.exit.
      ldb-waf: Install manual pages for ldb in standalone build, install
      selftest: list.remove raises ValueError rather than KeyError.
      s4-python: Remove cruft to deal with static python modules, which are no
      s4-waf: Look for xsltproc executable, required to build manpages.
      ldb-waf: Fix installation path of manpages, simplify manpage handling.
      ldb: Remove manual pages for binaries that have already been moved to utils/.
      wafsamba: Actually install manual pages.
      s4-waf: sanitize library names like the old build system did, only add
      wafsamba: Default blacklist to an empty list rather than None.
      tdb-waf: Simplify manpage handling.
      tdb-waf: Don't install binaries when using system tdb.
      ldb: Support building with system ldb library
      Add manpages argument to SAMBA_LIBRARY().
      waf: Refactor manpage building code.
      ldb/waf: Fix build with system and bundled ldb.
      talloc: Don't set is_bundled for standalone build.
      ldb: Fix dependencies when building with system ldb.
      ldb: Move utility functions to separate file.
      ldb: Remove Samba-specific symbols.
      ldb: Install ldb_handlers.h header.
      pyldb: Remove duplicate copy of function.
      wafsamba: Only try to build manpages if XSLTPROC was actually found.
      pyldb_util: Remove dependency on LIBPYTHON - it's already there
      s4-python: Fix formatting.
      Add missing stub functions.
      s4-python: Start using standard python logging infrastructure rather
      upgrade: Properly cancel/commit transactions in a couple more places.
      upgradeprovision: Use logging infrastructure.
      Friendlier message.
      Remove unused version options for subunitrun.
      s4-test: Use smb.conf path set in environment rather than using
      s4-provision: Use logger in provision backends.
      param/share: Use static prototypes.
      librpc: Fix netlogon.h file to install - not the torture one but the one
      libgpo: Use system libraries if possible.
      Support system talloc/tevent headers.
      librpc: Install the right headers.
      s4-waf: Fix installation of .so links for libraries that are not bundled but have a mangled name.
      ldb-samba: Add missing dependency on credentials code.
      dsdb: Build modules as external modules when using system ldb.
      wafsamba: Only add init function if not building module as shared library.
      dsdb: Fix includes when building against system ldb.
      ldb: Only build standard ldb modules when building bundled ldb.
      wafsamba: Improve assertion error message to include the module.
      wafsamba: Fix building of modules as shared libraries.
      wafsamba: Fix filenames for ldb modules.
      ldb: Fix included ldb build.
      ldb: Bump version number, use same ABI version for Samba4 and non-Samba 4 versions.s
      Attempt to fix SamDB test infrastructure (not used in Samba anywhere, only in OpenChange).
      dcerpc-samr: Fix library name.
      wafsamba: Fix include path inheritance from module subsystems.
      s4-waf: Fix build of libldb_ildap against system ldb.
      waf: Fix installation of pidl manapges.
      s4: Fix build when there is a system-provided ldb.
      pidl-waf: Avoid relying on MakeMaker when installing pidl manpages.
      codepages-waf: When built with --with-fhs, install to
      web_server: Don't build wsgi support as python module but rather as
      ldb-samba: Don't build pyldbsamba as python module but rather as subsystem, so as to not delute /usr/lib.
      ldb: Don't build pyldb_util as python module but rather as subsystem, so as to not delute /usr/lib.
      s4: Build more python convenience files as subsystems rather than as python modules.
      s4-waf: Don't include pytalloc when embedding python.
      s4: Don't build a $prefix/lib/libpython.so, as such a library often already exists :-)
      ldbsamba: Build as subsystem to prevent infinite recursion issues.
      wafsamba: Use BUILTIN_LIBRARY() rather than relying on side-effects.
      ldb: Remove dependency on self.
      replace: Avoid hiding symbols when libreplace is builtin, as this
      samba4: Build libreplace as builtin library by default so it doesn't end
      waf: Add missing dependency (so header paths are inherited) on talloc to internal python lib.
      wafsamba: Fix typo: noextenion -> noextension.
      s4-python: Use sys.prefix rather than guessing prefix from current
      dsdb: Make module ops struct for each module public.
      wafsamba: Factor out functions to determine if a bundled library should not or
      dsdb: Use Samba includes so _PUBLIC_ is defined.
      wafsamba: Use convenience function to find out if bundling is necessary.
      wafsamba: Allow manually specifying cflags/ldflags for system libraries.
      dsdb: Fix includes when building against system ldb.
      heimdal/waf: Initial work on making it possible to use the system
      wafsamba: Use octal modes directly rather than constants.
      pydsdb: Move set_schema_from_ldif function to pydsdb from pyglue.
      pydsdb: Move dsdb_set_schema_from_ldb to pydsdb.
      pydsdb: Move write_prefixes_from_schema_to_ldb to pydsdb from pyglue.
      pyglue: Remove unused code.
      pyglue: Trim dependencies.
      python: Remove unnecessary Ldb.set_invocation_id - use SamDB.set_invocation_id instead.
      dsdb_schema_info: Clean up imports, avoid using rpc test case for
      pytdb: Cleanup formatting.
      samba.tests: Provide TestCase and TestSkipped classes (from testtools) for convenience.
      python/passwords: Clean up imports.
      ntacls: Raise TestSkipped rather than writing to stdout.
      samba.tests.samba3: Clean up imports, use new TestCase class.
      pyrpc: Fix reference counting when using secondary connections.
      acl: Clean up formatting, use samba.tests.TestCase.
      python: Use samba.tests.TestCase, make sure base class tearDown and
      s4-python: Remove trivial function, replace by dictionary.
      samdb: Fix formatting, move get_oid_from_attid from Ldb to SamDB.
      Move a few more samdb-specific methods to SamDB, away from Ldb.
      Formatting cleanups; use True/False for booleans, unnecessary backslashes, spacing.
      Move convert_to_openldap onto Schema class.
      Some more formatting fixes, move schema related functions from Ldb to Schema.
      ldb: Remove last import of dsdb.
      ldb: Change LDBSAMBA back to subsystem, update comments, use different
      Remove unnecessary use of transactions.
      Use standard Python syntax, booleans and set()'s where appropriate.
      setnttoken: Remove empty utility.
      s4-python: Remove more unused imports, fix use of sets in upgradehelpers.
      testparm: Convert to Python.
      testparm: Split up functions that do multiple things.
      s4-python: Implement LoadParm.dump().
      s4-python: Add LoadparmService.dump()
      testparm: Fix exit value, install.
      testparm: Fix suppress prompt option.
      pyparam: Allow specifying None as section name to LoadparmContext.get()
      testparm: Simplify default option handling.
      ldb: Add ABI file for use when including ildap in the build.
      pyparam: Support Loadparm.get(p, "global")
      selftest: Use scripted testparm.
      provision: Properly cancel transactions on the secrets ldb.
      testparm: Check netbios name and workgroup characters and length.
      pydsdb: Mark all SamDB and Schema methods that are in pydsdb as
      policy: Add samba.policy.get_gpo_flags binding.
      samba4: Add python bindings for samba.policy.get_gplink_options.
      libpolicy: Fix the build.
      provision: Look for Samba prefix a bit harder.
      Per Andrews request, revert
      pidl/python: Increment reference counter on Py_None to prevent us from
      pidl/python: Make sure to always increment reference counter when using
      selftest: Store the output of the last test run in st/subunit.
      selftest: Clarify generation of idlist option.
      smbtorture: Fix loading of --load-list.
      Move UCS2 macros to common code
      selftest: Remove accidentally committed dummy test.

Jeremy Allison (265):
      Remove the global char *LastDir.
      Fix bug #6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object.
      Fix bug #7033 - SMBrmdir call always returns true, even on failure to delete a directory.
      Fix bug #7033 - SMBrmdir call always returns true, even on failure to delete a directory.
      Make file access control decisions a lot easier to debug (at level 10).
      Fix two uses of strncat -> strlcat. Ensure proper use of strncpy when setting socket name.
      Fix bug #7036 - net rpc getsid fails in hardened windows environments.
      Fix bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
      Second part of bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
      Modification of fix for bug 6876 - Delete of an object whose parent folder does not have delete rights fails even if the delete right is set on the object
      Revert "s3: remove unused Variable"
      Correct fix for unused variable return from ndr_decode. Use it :-).
      Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write.
      Fix bug #7072 - Accounts can't be unlocked from ldap.
      Second part of fix for bug #7072 - Accounts can't be unlocked from ldap.
      Fix bug #7069 - smbget does not return an error status after some errors
      Fix const warning.
      Fix a really interesting problem found by Volker's conversion of sessionsetup SPNEGO to asynchronous code.
      Fix bug #7079 - cliconnect gets realm wrong with trusted domains.
      Fix bug #7080 - Quota only shown when logged as root.
      Arg. Got the sense of the test reversed to fix bug #7080 - Quota only shown when logged as root.. Doh !
      Torture test for bug 7084 - Create time on directories not stored properly in an EA in new create time code.
      Fix bug #7084 - Create time on directories not stored properly in an EA in new create time code.
      Add debug to make it clear when EA dosmode set is invoked.
      Fix bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps.
      Fix bug 7081 - vfs_expand_msdfs doesn't work correctly (with fix identified)
      Fix bug 7075 - bug in vfs_scannedonly rmdir implementation.
      Fix bug 7104 - "wide links" and "unix extensions" are incompatible.
      Remove now unused variable.
      Fix trailing whitespace errors I added (sorry).
      Fix bug #6876 for acl_tdb module.
      Make "nmbd bind explicit broadcast" on by default.
      Fix off-by-one error in working out the limit of the NetServerEnum comment.
      Second part of fix for bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps.
      Missed one check on the memcpy for bug #7063.
      Fix bug #7122 - Reading a large browselist fails (server returns invalid values in subsequent SMBtrans replies)
      Change the default of "nmbd bind explicit broadcast" to "no"
      More of the fix for bug #7118 - nmbd problems with socket address.
      Revert "Change the default of "nmbd bind explicit broadcast" to "no""
      Temporary changes to dlinklist to keep the implementation static whilst
      s4-dsdb: update repl_meta_data.c to use new DLIST_ macros
      Fix bad use when freeing linked list. Todd Stecher (Original author) please check !
      Fix unused variable warning after change to new DLINK macros.
      Suplementary patch for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Fine changes to previous fix for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Final part of jumbo patch for bug #7104 - "wide links" and "unix extensions" are incompatible.
      Remove lp_safe_widelinks() -> convert to just lp_widelinks. Suggestion from Volker.
      Remove the code replaced by widelinks warning.
      Fix bug #7126 - [SMBD] With access denied error smbd return wrong NT_STATUS_OBJECT_PATH_INVALID error
      Revert "Fix bug #7126 - [SMBD] With access denied error smbd return wrong NT_STATUS_OBJECT_PATH_INVALID error"
      Remove #if SOFTLINK_OPTIMIZATION code.
      Fix error in docs. Should be milliseconds, not microseconds.
      Fix warning messages on compile in g_lock.c Volker & Michael please check.
      Simplify the logic in make_connection_snum(), and make it match Windows behavior.
      Use sec_initial_uid() in the places where being root doesn't matter,
      Fix commit d07cd37b993d3c9beded20323174633b806196b5
      Fix bug #6557 - Do not work VFS full_audit
      Fix bug #7146 - Samba miss-parses authenticated RPC packets.
      Got back to 16-byte padding on auth RPC. S3 clients and servers now cope with this. Jeremy
      Revert "Got back to 16-byte padding on auth RPC. S3 clients and servers now cope with this. Jeremy"
      Fix bug #7154 - mangling method = hash can crash storing a name not containing a '.'
      Fix bug #7155 - valgrind Conditional jump or move depends on uninitialised value(s) error when "mangling method = hash"
      More fixes for bug #7146 - Samba miss-parses authenticated RPC packets.
      More fixes for bug #7146 - Samba miss-parses authenticated RPC packets.
      First part of fix for bug #7159 - client rpc_transport doesn't cope with bad server data returns.
      Second part of fix for bug #7159 - client rpc_transport doesn't cope with bad server data returns.
      Add an "attributes" string to allinfo.
      Ensure STREAMERROR deletes any files in the \\testdir
      A test "store create time" parameter got commited by accident. Remove it.
      Change the credential handling so that we start with maxmux creds,
      Make conn_close_all() safe to call from SMB2 sessions (fix crash bug).
      Implement rename/move in SMB2 from Windows7.
      Fix up debug info on smb2_rename code.
      srv_pipe.c doesn't reference current_user anymore. Remove it.
      Fix for bug #7189 - Open txt files with notepad on samba shares creates problem.
      Allow "make test" to complete as root. Obviously only safe on tightly
      Add tests which, when run as root, will ensure we can't write
      Fix the shell script in the root case. When run as root, make test now detects CAP_DAC_OVERRIDE being left on in error.
      Fix bug #7234 - Symlink delete fails but incorrectly reports success to client.
      Added regression test for bug #7234 -  Symlink delete fails but incorrectly reports success.
      Try and fix bug #7233 - print fails with jobs >4GB from Win7 clients.
      Improve symlink delete test. Make sure we don't delete the link target by mistake.
      Remove more uses of "extern struct current_user current_user;".
      Missed a couple more uses of conn->server_info->ptok that need to be get_current_nttok(conn)
      Rever e80ceb1d7355c8c46a2ed90d5721cf367640f4e8 "Remove more uses of "extern struct current_user current_user;"."
      We don't need to treat the token differently in the conn->admin_user case, it should already be pointing to a token with uid == 0.
      Add accessor functions for current uid, gid, unix token, NT token and vuid.
      Pass "connection_struct *conn" into functions that currently use "current_user.XXX"
      Switch over to using get_currect_XXX() accessor functions.
      Simplify processing of "admin user". If a user is an admin_user ensure their conn token is uid 0.
      Remove reference to conn->admin_user in preparation for removal.
      Fix bug #7188 - Logic error in check of total_data for call_trans2mkdir()
      Remove the bool admin_user from conn struct. We no longer look at this to make access decisions.
      s3-printing: Fix "printer admin" functionality.
      Fix valgrind error when running under share level security. plaintext_password
      share_info.tdb could use non-canonicalized sharenames.
      Fix valgrind warning when source and dest stat are identical.
      Fix bug #7283 - vfs_acl_tdb does not work as expected.
      Missing include guard in source4/libcli/security/security.h
      Fix bug #7233 - print fails with jobs >4GB from Win7 clients.
      Fix bug 7297 - smbd crashes with CUPS printers and no [printers] share defined.
      Fix bug #7288 - SMB job IDs in CUPS job names wrong.
      Second part of bug #7288 - SMB job IDs in CUPS job names wrong.
      Revert the part of bug fix #7233 - print fails with jobs >4GB from Win7 clients.
      Fix bug #7240 - Net usershare is not case sensitive.
      Fix bug 7307 - man net usershare mistake
      If the timeout has been set to zero, don't register an end time.
      Fix for bug #7233 - print fails with jobs >4GB from Win7 clients.
      Second part of fix for bug #6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Fix bug 7310 - DOS attribute inconsistency with MS Office
      Make smbd_lock_socket/smbd_unlock_socket recursive with a ref_count.
      Add torture test for bug 7310 - DOS attribute inconsistency with MS Office
      Move initialize_async_io_handler() inside of smbd/aio.c.
      Fix issue with aio where r/w lock wasn't kept across aio read operations.
      Add FSCTL_QUERY_ALLOCATED_RANGES to the list of Windows ioctls we support.
      Parameterize "smb2 max read", "smb2 max write", "smb2 max trans".
      Ensure we total up the correct number of creds requested in a compound request.
      Don't forget to initialize *p_creds_requested.
      On compound requests, MS-SMB2 says clients MAY use 0xFFFFFFFF for compound tid and 0xFFFFFFFFFFFFFFFF for compound sessionid values. Cope with this.
      Test using (-1) for tid and sessionid in compound related requests.
      Start to plumb smb2 into the oplock system. Calls dummy functions for now.
      Fix bug #7339 - MSDFS is non-functional in 3.5.x
      Simplify call_trans2qfilepathinfo() and smbd_do_qfilepathinfo()
      Stop smb2 from calling into smb1 blocking lock request code.
      Plumb SMB2 stubs into all the places we defer SMB1 operations.
      Move to using 64-bit mid values in our internal open file database.
      Split out the client unix capabilities to those the server offered, and those the client asked for.
      Add basic DFS tests.
      Don't set "requested_posix_capabilities" in the sync code, already done in the async.
      First part of fix for bug #7331 - Compound async SMB 2 requests don't work right.
      Second part of fix for bug #7331 - Compound async SMB 2 requests don't work right.
      Final fix for #7331 - Compound async SMB 2 requests don't work right.
      Remove an unused auto variable.
      Fix valgrind error where a strdup of name reads one byte beyond the end. Ensure buffer returned from inotify is null terminated.
      Ensure vectors are always allocated with consistent size. Removes one byte alloc on SMB2 error packet. Always use talloc_zero_array on out vectors - fixes valgrind errors in tevent writes.
      Now SMB2 error messages are correctly being returned with the 1 byte data area, smbd_smb2_request_error_ex() must call smbd_smb2_request_done_ex() in order to do the padding correctly on compound replies.
      Make deferred opens (NT_STATUS_SHARING_VIOLATION) work over SMB2.
      Rename - no functional change. Stop all variables being called "req".
      At simo's request return struct tevent_req *treq -> treq. For consistency :-(.
      Allow smb2 create requests to be cancelled.
      Don't free the entire tevent_req on cancel, only the part we need (the immediate event).
      When sending the initial async response, this is never part of a chain.
      Implement oplocks within SMB2. Plumb into the existing SMB1 oplock system.
      Fix crash when rescheduling oplock open.
      When walking the SMB2 requests queue, ensure the request is still "in flight"
      Plumb in get_nt_acl into SMB2.
      Correctly report share types (now Win7 makes RPC calls against us).
      Fix more S3 build breakage. Matthias, please ensure S3 builds when
      Don't return an intermediate reply on async on a pipe call (Windows doesn't).
      Add debug statements so I can track the flow of RPC data.
      Don't return a potentially uninitialized NT_STATUS. We can now see user lists in Windows ACLs.
      Fix the "allow_smb2" bug being set to false that was driving me mad :-).
      Connect set security descriptor into SMB2 code.
      Update (C) for 2010.
      Attempt to fix bug #7399 - SMB2: QUERY_DIRECTORY is returning invalid values.
      Move the global blocking lock records into the smb1 state.
      Carefully label SMB1-specific locking calls.
      Plumb the SMB2 front end into the blocking lock backend.
      Fixed issue with return in a void function found by Björn JACKE <bj at SerNet.DE>
      Start to pass the SMB2 read torture tests.
      Client ignoring max write is a warning, not an error.
      Get in_minimum and EOF errors right.
      Return correct error on read request on directory.
      Get closer to passing SMB2 lock test. Still crashes but we get further.
      Move to MS-FSA algorithm when checking for invalid lock range.
      Fix more SMB2 locking. We still crash but this won't last :-).
      Fix SMB2 lock tests up to cancel-by-close.
      Fix cancel by close lock test.
      Fix crash in cancel-tdis lock test. Correctly shut down connection.
      Make us pass all SMB2 lock tests except MULTIPLE-UNLOCK and CONTEXT. Them next :-).
      This patch looks bigger than it is. It does 2 things. 1). Renames smbpid -> smblctx in our locking code. 2). Widens smblctx to 64-bits internally. Preparing to use the SMB2 handle as the locking context.
      When tearing down the connection make sure we close all files before
      Only MULTIPLE-UNLOCK test left to fix !
      Fix more of the SMB2-LOCK tests. Correctly unlock locks on error.
      Fix the processing of unlocks followed by locks. We now pass SMB2-LOCK test.
      Stop us crashing in SMB2-OPLOCK test. Don't allow more than one outstanding immediate event.
      SMB2 always have level2 oplock capability. Correct mapping from break messages to SMB2 oplock levels.
      Fix more SMB2-OPLOCK bugs. Only 3 more issues to address then we're good to go on this test.
      Pass more SMB2 oplock tests. Only oplock stream tests left to fix.
      Treat an open of stream ::$DATA as an open of the base file.
      Be more forgiving on client oplock break failure (as Windows does). Remove a global.
      Fix bug 7399 - SMB2: QUERY_DIRECTORY is returning invalid values.
      Now we behave as Windows does, remove a Samba3 specific test return.
      Refactor the sessionsetup SMB2 code to make it easy to add
      Fix the build of bin/smbtorture in source3. Guenther please check !
      Plumb in krb5 to the SMB2 sessionsetup code. First cut of this code.
      Change data_blob() to be based on top of data_blob_talloc(), instead of the reverse (as it is now).
      Fix our NTLMSSP implementation against the Microsoft torture tester.
      Keep track of credits we're giving out. Set initial credits to 1 (MS-SMB2 spec required).
      Implement missing info level SMB_FILE_LINK_INFORMATION.
      Thanks to Andrew Bartlett's advice, fix the NTLMSSP version problem the correct way.
      (Finally) fix bug #7158 - SMB2 connection resets during IOZone tests from 64-bit Vista client
      After talking with Microsoft engineers, the "lock spin time" is
      After talking with Microsoft engineers, immediately replying
      Correctly check error code return.
      Fix connecting to [homes] share over SMB2.
      Fix bug 7442 - Samba returns incorrect SMB2 QFS device info.
      Fix  bug #7410 - samba sends "raw" inode number as uniqueid with unix extensions.
      Fix what looks like a cut-and-paste error in our read_negTokenInit() function.
      Make -k a simple non-bool option.
      Set SMB2 max read/write/trans sizes to Win7 compatible - 1Mb.
      Add comments to usage error message for -k to make it obvious what this needs.
      Doh! If you're going to give advice in "useage", make sure it's correct.
      Make krb5 over SMB2 identical to the way we handle it in SMB1.
      Make DFS work over SMB2.
      Don't forget brackets around bitwise tests.
      If using fake oplocks, use the correct SMB2 type code for "no oplock".
      Add in support for the NTLMSSP version reply.
      Standardize debug messages for read and write.
      Don't use sigev_value.sival_int to just store the mid, use sigev_value.sival_ptr to store the private data structure.
      Move to using a DATA_BLOB inside of struct aio_extra, not a char *.
      Fix a crash bug found by Ira Cooper <samba at ira.wakeful.net>.
      Ensure we remove SMB2 cancel requests from the active queue
      Found by Guenther - fix up our fallback paths from krb5 to NTLMSSP when using SMB2.
      Allow us to cope correctly with NT_STATUS_MORE_PROCESSING_REQUIRED when downgrading from krb5 to NTLMSSP over SMB2.
      Change smbd_aio_complete_mid() -> smbd_aio_complete_aio_ex(). Simplifies
      Rename req -> smbreq.
      wait_for_aio_completion() should return 0 on non-aio compiled case.
      Oops. Forgot to re-initialize the aio_ex pointer from sival_ptr.
      Fix a long-standing bug with async io that would only be triggered by SMB2.
      Move "write_though" into aio_ex struct.
      Make aio_ex owned by a talloc context, not neccessarily on the null context.
      Second part of fix for 7501 - SMB2: CREATE request replies getting mangled.
      Fix a valgrind error found by SMB2-COMPOUND test.
      Split out the "finished read processing" code into a function so it can be called
      Ensure we don't send SMB1 keepalives on an SMB2 connection.
      Split out the "finished write processing" code into a function so it can be called
      Rename "allow_smb2" -> "using_smb2" and make the usage clearer.
      Don't use the autofree context for the globals. This causes child smbd's forked
      Ensure we correctly setup req->subreq before testing for async. Stops crashes when
      Implement AIO in SMB2. Doesn't allow cancel calls yet (to be added).
      Fix the build in the non WITH_AIO case (sorry).
      Fix warning messages about unused result of talloc_move. We're really talloc_steal'ing here.
      SMB2 correctness fix. As we've already returned the credits in an interim
      Remove unused function.
      Remove two unused functions (prs_force_dynamic, prs_set_session_key).
      Remove an unused chunk of code (will make it easier to talloc'ize prs_XXX).
      Use #defined constant instead of "false" to be clearer about intent.
      Convert the prs_XXX struct and functions to use talloc instead of malloc. Passes valgrind and make tests for client and server. Second version of this patch after splitting up at Simo's request. Patch to follow will delete extraneous prs_mem_free() calls.
      Second part of fix converting prs_XX struct and functions to talloc. Remove unneeded prs_mem_free calls.
      Fix bug 7528 - Solaris with NIS autohome.
      Add parse_setjob_command() to make setting job state easier for users.
      Change talloc_autofree_context() to frame in Andrew's schannel.tdb TDB_CLEAR_IF_FIRST
      Don't use frame as the talloc ctx in open_schannel_session_store(), as this breaks running from inetd
      Change one more use of "struct rpc_hdr_info" -> "struct ncacn_packet_header"
      Revert "Remove the global char *LastDir."
      Fix bug - 7551 smbclient does not return proper exit code.
      Make the "map to guest" parameter work correctly with NTLMSSP (spnego
      Fix bug #7570 - New smb2 max parameters are undocumented.
      Fix [Bug 7577] SPNEGO auth fails when contacting Win7 system using Microsoft Live Sign-in Assistant
      Remove parse_negTokenTarg(), as it's actually incorrect. We're processing
      Move the addition of the 16 byte guid out of spnego_gen_negTokenInit() and
      Remove gen_negTokenInit() - change all callers to spnego_gen_negTokenInit().
      Fix warning - no return value for a non-void fn.
      Fixes pointed out by <david.kondrad at legrand.us>. Free memory if not being
      Remove gen_negTokenTarg(), as it's not actually creating a TokenTarg frame, but a TokenInit one.
      Rename spnego_gen_negTokenTarg() -> spnego_gen_krb5_negTokenInit()
      Add TALLOC_CTX argument to spnego_parse_negTokenInit, reduce
      Fix one more data_blob -> data_blob_talloc. Move away from implicit NULL context tallocs.
      Fix warning on 64-bit machines.
      Add approriate TALLOC_CTX's thoughout the spnego code. No more implicit NULL contexts.
      Fix bug 7583 - Smbclient fails to kerberos connect to a Alfresco JLAN CIFS Server
      Second part of fix for bug 7578 - 'net idmap restore' fails to set HWM, causing duplicates.
      Fix several places where talloc_asprintf returns were unchecked.

Jim McDonough (4):
      Don't exit(0) on error
      Update copyright
      Display an error on net conf import failures.
      Fix i18n of net conf import error message.

Joachim Schmitz (1):
      s3: define timespec before we use it

John H Terpstra (2):
      Fix typo reported by Söderlund David <david.soderlund at baesystems.se>.
      Merge branch 'master' of git+ssh://git.samba.org/data/git/samba

Julien Kerihuel (2):
      Install util/tevent_* public headers. Required by OpenChange for compiling IDL
      Choose between local tevent_status.h header file and installed one

Justin Maggard (1):
      s3: Fix bug 7578

Kai Blin (178):
      selftest: Print reason when a test fails unexpectedly
      s3 winbindd: Get WINBINDD_CHECK_MACHACC torture test to work again.
      s3 selftest: Fix the WINBINDD_GETDCNAMEe test.
      s3 selftest: Allow the enumeration of users and groups
      s3 winbindd: Return number of groups in data.num_entries for WINBINDD_LIST_GROUPS
      s3 selftest: Fix WINBINDD_LIST_GROUPS test
      s3 selftest: Fix LOOKUP_SID test.
      s3 test: Fix WINBINDD-STRUCT tests
      s3 selftest: Enable the WINBIND-STRUCT tests
      s4 selftest: Ignore more winbind test known to fail
      s4 selftest: Fix and reenable WINBIND-STRUCT.NETBIOS_NAME test
      s3 net: Fix compile error with WITH_DNS_UPDATES
      s3 net/i18n: Use only one spelling for "Usage:"
      s3 net/i18n: update .po files
      s3 net: Fix compile warnings
      s3 net/i18n: Update .po files
      s4 includes: Include system/locale.h to get access to <ctype.h>
      tsocket: Fix description for tstream_readv_pdu_queue_send/recv
      tsocket: Fix the description of tstream_writev_queue_send/recv
      libwbclient: Zero out context on initialization
      libwbclient: Add async wbcPing_send/_recv
      libwbclient: torture-test wbcPing async functions.
      libwbclient: add wbcInterfaceVersion send/recv calls
      libwbclient: Add async wbcInfo_send()/wbcInfo_recv() calls
      libwbclient: Add wbcNetbiosName_send/recv calls
      libwbclient: Add wbcDomainName_send/recv call
      libwbclient: Add wbcDomainInfo_send/recv calls
      libwbclient: Add wbcInterfaceDetails_send/recv
      libwbclient: Implement wbcSidToUid_send/recv
      libwbclient: Implement wbcUidToSid_send/recv
      libwbclient: Implement wbcSidToGid_send/recv
      libwbclient: Implement wbcGidToSid_send/recv
      libwbclient: Implement wbcLookupSid_send/recv
      libwbclient: Implement wbcAuthenticateUserEx_send/recv
      libwbclient: Implement wbcLookupName_send/recv
      libwbclient: Test wbcLookupName async functions
      s4 idmap: Make the sid_to_xid and xid_to_sid calls static.
      s4: Switch to S3-style id mapping data types.
      s3 test: Make the netbios name test pass again
      libwbclient: Separate out the async functions
      libwbclient: Fix s4 build failure by fixing up includes.
      s3 ntlm_auth: Don't malloc data that will be talloc_free()d
      lib/replace: use correct inttypes in crypt.c
      lib/replace: Don't use StrnCpy inside crypt.c
      build: Enable more warnings when using the --pedantic configuration option
      build: Add a ctags command to build a ctags-style tags file
      build: rename s4 compare_config_h.sh helper and add a s3 version of it
      build: Check for various headers S3 needs.
      build: Add a basic wscript file for Samba3
      build: Check for CUPS
      build: Check for LDAP libraries
      build: Check for krb5 headers
      build: Check for syscall headers
      build: check for uint_t
      build: check size of dev_t, ino_t and time_t
      build: check for headers needed to generate stack traces
      build: check for inttypes.h
      build: check for inotify support
      build: Check for kernel change notify support
      build: Check for Linux kernel oplocks
      build: Check for IRIX kernel oplock types
      build: Check for kernel share modes
      build: Check for functions needed by Samba3
      build: Fix package name and package string case
      build: Check for various members of struct stat
      build: Check for POSIX capabilities
      build: check for int types included from rpc/rpc.h
      build: Check if the compiler will optimize out functions
      build: Change checks to conform to new CHECK_* behaviour
      build: Import conf decorator in samba_conftests.py
      s3-waf: check for default charsets
      nsswitch/wbinfo: Fix the S4 header check
      s3-waf: Correctly create symlink if SAMBA_BINARY targets are not in the current diectory
      build: Add an always parameter to CHECK_DECLS
      s3 i18n: Fix up missing newlines in pam_winbind translations
      s3 i18n: Fix up missing newlines in more pam_winbind translations
      build: Update the waf build to fix python header checks
      build: skip missing executables in testwaf.sh
      wbinfo: Add better libwbclient error reporting
      s3 smb2: Fix the build without kerberos
      s3-waf: Added support dynconfig cflags
      s3-waf: Add more objects trying to build smbd
      s3-waf: Fake some defines that need to be set by configure options later
      s3-waf: Check for KRB5_DEPRECATED handling
      s3-waf: Move cups, ldap and krb5 checks to the end of the wscript file
      s3-waf: Check for LDAP
      s3-waf: Add some more krb5 checks
      s3-waf: Fix the CUPS dependency
      s3-waf: Add helper that facilitates defining --with-x and --without-x options
      s3-waf: Allow using --enable/--disable options as well
      build: Don't look for krb5.h in libreplace
      s3-waf: Allow building without ads/ldap/krb5 even if the libs are installed
      s3-waf: Support smbd build without ldap and kerberos
      s3-waf: Build nmbd using waf as well
      s3-waf: Add ctags command
      s3-waf: build wbinfo using waf
      s3-waf: Don't recurse into tsocket dir during configure
      s3-waf dynconfig: s3 configfile default is $LIBDIR/smb.conf
      s3-waf: build testparm and winbindd
      s3-waf: Build LDB as a subsystem
      s3-waf: Fix install location of testparm and wbinfo
      s3-waf: Add configuration option for merged build
      s3-waf: Add dummy configuration option for PAM
      s3-waf: Add dummy configuration options for quotas
      s3-waf: Add dummy configuration option for sendfile-support
      s3-waf: Add dummy configuration option for utmp
      s3-waf: Add dummy configuration option for pthreadpool
      s3-waf: Get winbindd to build again with current master
      s3-waf: Don't build winbindd when --without-winbind is set
      s3-waf: Introduce more subsystems to reduce build time
      s3-waf: Fix global includes to fix waf configure --help output
      s3-waf: Fix the build --with-ldap
      s3-waf: Fix the minimal build
      s3-waf: fix up the LDAP objects if LDAP isn't built
      s3-waf: build winbindd again
      s3-waf: Build swat
      s3-waf: replace all - with _ in the configuration option names
      s3-waf: note that the options are broken
      s3-waf: Use a common subsystem for samba-popt code
      s3-waf: Use a common subsystem for the kerberos client code
      s3-waf: add eventlogadm binary
      s3-waf: Fix up the winbindd build
      s3-waf: add popt and tdb include dirs to the includes list
      s3-waf: Autogenerate the static and dynamic init function calls
      s3-waf: fix eventlogadm build with winbind
      s3-waf: tdb includes are in lib/tdb/include
      s3-waf: clean up dependencies a little
      s3-waf: create a SECRETS subsystem
      s3-waf: clean up includes
      s3-waf: autogenerate lists of static modules
      s3-waf: build shared modules as subsystems
      s3-waf: Remove references to LDB
      s3-waf: Some files moved during the rebase
      s3-waf: Fix up PIDL includes.
      s3-waf: fix the winbindd build again
      s3-waf: Fix build with ldap by adding a SMBLDAP subsystem
      s3-waf: more elaborate host_os check for STAT_ST_BLOCKSIZE
      s3-waf: Fix the build after rebase
      s3-waf: ndr string functions moved to top level
      s3-waf: Really disable winbindd build when --without-winbind is specified
      s3-waf: Actually make --with/--without-swat work
      s3-waf: Don't hardcode the name of the awk executable in wscript_build
      s3-waf: Add darwin to the host_os-specific checks
      s3-waf: Check for additional options on *xattr
      s3-waf: Fix the naming of some variables introduced recently
      s3-waf: Build smbclient binary
      s3-waf: Allow to build with kerberos support
      s3-waf: Also set "developer" env when building in developer mode
      s3-waf: Fix typo
      s3-waf: Fix the build of swat with --enable-cups
      s3-waf: Detect which version of krb5_enctype_to_string is used
      s3-waf: Fix the smbclient build with libcap
      s3-waf: Match the defines from the autotools build on PACKAGE_*
      s3-waf: Support builds with utmp accounting
      s3-waf: Set HAVE_GSSAPI if gssapi libs were found
      s3-waf: Add more darwin-specific options
      build: Also replace '-' by '_' when creating header defines
      s3-waf: support avahi builds
      s3-waf: Fix the build after rebase
      wafsamba: Correctly detect if bld.env.XSLTPROC is not set
      ldb: Revert signature file changes made in 151e239bcf2860411527a953d627b2d724c0a57e
      s3-waf: Fix build after ntlmssp_sign.c moved
      s3-waf: Check for broken nisplus include files
      s3-waf: Check if compiler supports LL suffix
      s3-waf: Add check for asm/types.h
      s3-waf: Check for device major and minor macros
      s3-waf: Add check for dirent.d_off member
      s3-waf: Fix the build
      s3-waf: Fixed dependencies of the the krbclient subsystem.
      s3-waf: Fix up smbclient dependencies
      s3-waf: Work around missing *netgrent prototypes on OSX 10.4
      s3-waf: Add check for iconv
      s3-waf: Fix the OSX 10.4 build by adding an explicit resolv dep on smbclient
      build: Allow for a custom message in CHECK_C_PROTOTYPE
      s3 configure: Check for (set|get|end)netgrent prototypes
      s3-waf: Change the (set|get|end)netgrent checks to match the configure.in checks
      s3: Attempt to fix the build on NetBSD
      s3 build: Fix *netgrent prototype detection on opensolaris

Kamen Mazdrashki (218):
      s4: Ignore few more auto-generated files
      s4/ldap: Fix nested searches SEGFAULT bug
      s4/ldap: Test to expoit ldb_ildap bug in case of nested search requests
      s4/idl: PrefixMap description for W2K3 and W2K8 Schema:prefixMap attribute
      s4/drsblobs: Custom ndr_print_ implementation for drsuapi_MSPrefixMap_Entry
      s4/idl: drsblobs IDL regeneration
      s4/ldif: Better control on ldif_write_NDR() errors processing
      s4/ldif: Handle Schema:prefixMap blobs in W2K3 and W2K8
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs: propagate DRS_ extension flags in code base
      s4/idl: Naming reserved flags for DRSUAPI_SUPPORTED_EXTENSION_ field
      s4/idl: regenerating drsuapi.idl
      s4/net_drs: 'net drs' utility initial creation
      s4/net_drs: 'net drs bind' command implementation
      s4/net_drs: 'net drs kcc' command implementation
      s4/ldap: Refactor the fix for ldap nested searches
      s4/schema: Move msDS-IntId implementation to samldb.c module
      s4/idl: drsuapi.idl fix drsuapi_DsReplicaSyncRequest1 description
      s4/idl: drsuapi.idl fix drsuapi_DsReplicaSync definition
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs: Propagate drsuapi_DsReplicaSyncRequest1 changes in source base
      s4/drs: Propagate drsuapi_DsReplicaSync changes in source base
      s4/net_drs: Utility macros for conditions checking
      s4/drs_util: Move DRSUAPI connection data into separate object
      s4/drs_util: Refactor code to use net_drs_connection object for DRSUAPI connecitons
      s4/drs_util: Add public function for binding to a DC
      s4/drs_util: 'net drs replicate' command implementation
      s4/idl: rename 'guid1' to 'source_dsa_guid' in drsuapi_DsReplicaGetInfoRequest description
      s4/drs: Propagate drsuapi_DsReplicaGetInfoRequest... changes into source code
      s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string1' to 'attribute_name'
      s4/idl: drsuapi_DsReplicaGetInfoRequest2 - 'string2' to 'value_dn_str'
      s4/drs: Propagate drsuapi_DsReplicaGetInfoRequest2 changes in source code
      s4/idl: Regenerate IDL for DRSUAPI interface
      s4/drs_util: 'net drs showrepl' command implementation
      s4/ildap: fine tune ildb_callback()
      s4/tort: fix annoying "union spoolss_PrinterInfo" undefined warnings
      doxygen: talloc_get_type name fixed in Doxygen documentation
      s4/idl: drsuapi_DsReplicaSyncOptions flags are no more used
      s4/idl: DsGetNCChanges - switch types should be unsigned
      s4/drs: DsGetNCChanges - Propagating IDL changes to source code
      s3/drs: DsGetNCChanges - Propagating IDL changes to source code
      s4/idl: DsReplicaUpdateRefs - switch types should be unsigned
      s4/idl: DsReplicaAdd - switch types should be unsigned
      s4/idl: DsReplicaDel - switch types should be unsigned
      s4/idl: DsReplicaMod - switch types should be unsigned
      s4/idl: DsGetMemberships - switch types should be unsigned
      s4/idl: DsCrackNames - switch types should be unsigned
      s4/drs: DsCrackNames - Propagating IDL changes to source code
      s3/drs: DsCrackNames - Propagating IDL changes to source code
      s4/idl: DsWriteAccountSpn - switch types should be unsigned
      s4/drs: DsWriteAccountSpn - Propagating IDL changes to source code
      s4/idl: DsRemoveDSServer - switch types should be unsigned
      s4/drs: DsRemoveDSServer - Propagating IDL changes to source code
      s4/idl: DsGetMemberships2 - switch types should be unsigned
      s4/idl: QuerySitesByCost - switch types should be unsigned
      s4/idl: drsuapi_QuerySitesByCostCtr1 'unknown' member is now known
      idl: Regenerate DRSUAPI idl files
      s4/idl: DsAddEntry - switch types should be unsigned
      s4/drs: DsAddEntry - Propagating unsigned switches to source code
      s4/idl: DIRERR error codes definition
      s4/idl: Update drsuapi_DsAddEntryErrorInfoX definition
      s4/drs: drsuapi_DsAddEntryErrorInfoX changes propagated to source code
      s4/idl: DsAddEntry - refactor DsAddEntryCtr2 structure
      s4/drs: DsAddEntry - extending error handling for V2 replies
      s4/idl: drsuapi_DsAddEntryError refactored
      s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code
      s4/idl: redefine drsuapi_DsAddEntryErrorInfo1
      s4/drs: pretty print for drsuapi_DsAddEntry_AttrErrListItem_V1
      s4/drs: Refactor error handling for DsAddEntry V3 replies
      s4/idl: Add DsAddEntry Name resolution error definition
      s4/idl: Add DsAddEntry Referral error definition
      s4/idl: Complete drsuapi_DsAddEntryErrorInfo description
      s4/idl: Remove drsuapi_DsAddEntryExtraErrorBuffer - it is not used anymore
      s4/drs: Implement DsAddEntry V3 error handling
      s4/idl: DsAddEntry V3 request description
      s4/drs: Pretty print for drsuapi_SecBufferType
      idl: Regenerate DRSUAPI idl files
      idl: drsuapi.idl - fix few more comments
      s4/torture: Suppress Valgrind warnings
      s4/idl: Schema:schemaInfo attribute description
      s4/idl: drsblobs IDL regeneration
      s4/ldif: Handle Schema:schemaInfo blobs
      s4/dsdb: Define dsdb representation for schemaInfo attribute
      s4/dsdb: dsdb_schema_info object implementation
      torture: add torture_assert_goto() convenience macro
      s4/tort: Unit test for schemaInfo implementation
      librpc/idl: Use [nopython] attr for types used in decode_PrimaryKerberos method
      s4: Add 'drsblobs' Python module
      s4/was: Add 'drsblobs' Python module
      s4/schema: Torture test for schemaInfo implementation
      s4/test: add shemaInfo torture test to automated test suite
      s4/samldb: schemaInfo attribute must be updated when adding new Schema object
      s4/waf: add new files to WAF build
      s4/test: Use drsut_schemainfo_new() instead of SCHEMA_INFO_DEFAULT local define
      s4/dsdb: Use dsdb_schema_info object to verify schema_info blobs
      s4/dsdb: Use dsdb_schema_info object to create default schemaInfo values
      s4/test: Add DRS-UNIT test suite to 'quicktests' list
      s4/dsdb: Let caller to control if valid invocationId is critical or zero-guid is acceptable
      s4/dsdb: split writing of schemaInfo blob in two parts
      s4/dsdb: Set schemaInfo attribute value during provisioning
      s4/libnet: Dump DRSUAPI_DIRERR_OK as unexpected
      s4/libnet: Add few new lines in the debug log so it is readable again
      s4/libnet: handle errors returned for DsAddEntry_v3 properly
      s4: fix a typo
      s4/py_net: Source code formatting fix
      s4/libnet: Allocate mem in supplied mem_ctx
      s4/dsdb: dsdb_validate_invocation_id() should validate by objectGUID
      s4/net_drs: Fix Connection name printed
      Revert "s4/dsdb: Set schemaInfo attribute value during provisioning"
      s4/test: schemaInfo may not to be set yet
      s4/dsdb: Use default schemaInfo value when no such value is given
      s4/samldb: Create initial schemaInfo value if it doesn't exists yet
      s4/dsdb: Update Schema cache with updated schemaInfo value
      s4/dsdb: remove unused dsdb_schema_info_create() function
      s4/dsdb: schemaInfo revision may be 0
      s4/tort: Add simple unit test for dsdb_schema_info object creation
      s4/dn: handle case 'base' dn has no components
      s4/tort: Add test for comparing special DNs
      s4/selftest: fix passwords in selftest-vars script
      s4/metadata: fix whitespaces
      s4/drsuapi: Add another set of predefined ATTIDs
      s4/drsuapi: Yet another set of predefined ATTIDs
      s4-drsuapi: Sort ATTID definitions by ATTID value
      s4/test: Replace hand-made field count to test
      s4/test: rename enum test_fields{} member names to be more descriptive
      s4/test: make test_cleanup() in libnet_user library more robust
      s4/test: remove unused code
      s4/test: Connect SAMR and LDARPC pipes before calling libnet_ functions
      s4/test: test_userinfo/_async tests should use passed user_name param value
      s4/test: refactor NET-USERINFO test to be more 'torture' friendly
      s4/test: make samr_close handle functio public
      s4/test: Refactor test_opendomain to address following
      s4/test: change prototype for test_opendomain()
      s4/test: remove torture/libnet/utils.h as we are using proto.h now
      s4/test: remove local impl for open_domain and use common one
      s4/test-libnet-utils: refactor test_user_create()
      s4/test-libnet-user: Remove test_createuser()
      s4/test-libnet: Remove multiple test_samr_close() impelementations
      s4/test: remove duplicated comment
      s4/test: Refactor test_user_cleanup to be more robust
      s4/test: libnet_user tests should use common test_user_cleanup
      s4/test: Remove duplicated test_opendomain() functionality
      s4/test: remove create/delete group implementation in API-CREATEGROUP test
      s4/test: Fix incorrect NTSTATUS comparison
      s4/test: Call test_user_cleanup with original RDN for the user
      s4/test-libnet: Helper func to initialize libnet_context
      s4/test: fix SEGFAULT in test_group_create when rid is NULL
      s4/test: use test_libnet_context_init() function to create libnet_context
      s4/test-libnet: Fix compile-time warning
      s4/test-libnet: remove unused code
      s4/test-libnet: Move LSA close handle function to a common location
      s4/test-libnet: add few comments for utility functions
      s4/test-libnet: Refactor test_user_create() little bit to:
      s4/test-libnet: Refactor test_group_create() a little to:
      s4/test-libnet: Re-align code a bit - more readable this way IMO
      s4/dsdb-schema: Index attributes on msDS-IntId value
      s4/dsdb: Move schema accessors cleanup in separate function
      s4/dsdb: msg_idx->dn should be allocated in msg_idx mem context
      s4/test: fix DC password in selftest-vars.sh
      s4/dsdb-test: fix usage comment
      s4/drs-test: Tests Deleted objects replication
      s4/utils: fix few 'net drs replicate' error messages
      s4/drs: DsReplicaSync should search partition to Sync
      s4/drs-test: Fix whitespaces and permissions for delete_object.py test
      s4/net-drs: Fix error messages typo and formatting
      s4/drs-test: Add few comments in DrsDeleteObjectTestCase test
      s4/drs: re-implement 'renaming' object replication
      s4/test: Run DrsDeleteObjectTestCase as part of S4 testing
      s4/ndr: Fix tuncating of constant to a 'long' type
      s4/repl_meta_data: remove duplicated (and commented out) log
      s4/dsdb: Add DSDB_FLAG_NEXT_MODULE flag
      s4-dsdb/samdb/ldb_modules/linked_attributes.c: make use of DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/repl_meta_data.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/ridalloc.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/rootdse.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samba3sid.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samldb.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/schema_load.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/subtree_delete.c: Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/util.c Use DSDB_FLAG_NEXT_MODULE flag
      s4/dsdb: Assert DSDB_FLAG_*_MODULE is always passed in function call
      s4-source4/dsdb/samdb/ldb_modules/util.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/schema_load.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/samba_dsdb.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/ridalloc.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/repl_meta_data.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/pdc_fsmo.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/partition_init.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/operational.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/naming_fsmo.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/linked_attributes.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-source4/dsdb/samdb/ldb_modules/acl.c Use DSDB_FLAG_NEXT_MODULE flag
      s4-dsdb: Implement module switching in dsdb_module_search_dn()
      s4-dsdb/util: Reorder DSDB_FLAG_* checks
      s4: fix warning: unused variable ‘i’
      s4-ldb: Implement ldb_msg_difference() function to accept a memory context from client
      s4-dsdb: use ldb_msg_difference() in source4/dsdb/schema/schema_set.c
      s4-dsdb/schema/schema_set.c: fix trailing spaces and comments spelling
      s4-tools: use ldb_msg_difference() in ldbedit - modify_record()
      s4-test: Use ldb_msg_difference() in torture/rpc/dssync.c test
      s4-pyldb: Use ldb_msg_difference() in py_ldb_msg_diff()
      s4-ldb: Write more explanatory comment for ldb_msg_add()
      s4-ldb: Add separate function to add empty element into ldb_msg
      s4-ldb: Use _ldb_msg_add_el() in ldb_msg_add_empty()
      s4-ldb: Use _ldb_msg_add_el() in ldb_msg_add()
      s4-ldb: Add ldb_msg_normalize() to accept a memory context from client
      s4-dsdb: use ldb_msg_normalize() in source4/dsdb/schema/schema_set.c
      s4-dsdb: use ldb_msg_normalize() in source4/lib/ldb/common/ldb.c
      s4-dsdb: use ldb_msg_normalize() in ldbadd-process_file()
      s4-test: Use ldb_msg_normalize() in torture/rpc/dssync.c test
      s4-test: Use ldb_msg_normalize() in sqlite3 backend
      s4-dsdb: use ldb_msg_normalize() in ldb_msg_difference()
      ldb: Mark _DEPRECATED_ ldb_msg_diff() and ldb_msg_canonicalize() functions
      s4: Remove trailing whitespaces

Karolin Seeger (43):
      s3-docs: Fix typos.
      s3/registry: Fix typo in comment.
      s3/docs: Fix typo.
      lib/popt: Fix typo in README.
      s3/winbind_ccache: Fix typo in debug message.
      s3-docs: Add missing para end tag.
      s3-docs: Fix make manpages3.
      s4-heimdal: Fix typos in comment.
      s3-docs: Remove trailing whitespaces and fix a typo.
      Fix typo in comments.
      Revert "s3:configure: add --enable-as-needed"
      Revert "Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to respond to a read or write."
      s3-passdb: Fix typo in debug message.
      s3-builtin: Add some builtin groups.
      security.idl: Add missing builtin groups.
      s3: Re-run make samba3-idl.
      s3-builtin: Add missing builtin groups.
      s3-testparm: Throw warning when 'workgroup' and 'netbios name' are identical.
      s3-util_sock: Rise debug level for getpeername failed messages.
      s4-krb5: Fix typos in comment.
      s3-docs: Fix typo in man idmap_ad.
      examples: Fix typo in comment.
      s3-winbindd: Fix typo in comment.
      s4-heimdal: Fix typo in comment.
      s3-docs: Improve "winbind nss info" section in man smb.conf.
      s3-docs: Move -D option to the right paragraph in man winbindd.
      s3-docs: Add documentation of the net g_lock subcommand.
      s3-docs: Unify capitalization.
      s4-cracknames: Fix typo in debug message.
      s4-heimdal: Fix typo in comment.
      selftest: Fix typo in comment.
      s4-configure: Fix typo in comment.
      s3-passdb: Fix typo in comment.
      s3-smbd: Fix typo in comment.
      s3-docs: Add missing whitespace.
      WHATSNEW: Start 3.6.0pre1 release notes.
      s3-docs: Remove older documentation of smb2 parameters.
      WHATSNEW: Update changes.
      WHATSNEW: Update changes.
      WHATSNEW: Update changes.
      VERSION: Adapt version string.
      VERSION: Bump version to 3.6.0pre1.
      s3/configure: Disable the automatic merged build.

Lars Müller (10):
      Work around bad use of autoconf interna
      Merge branch 'master' of git://git.samba.org/samba
      Add cross option to samba_cv_linux_getgrouplist_ok
      Add dependency of bin/smbfilter to libwbclient.
      s3: Install and uninstall the static version of libwbclient
      Link testsuite/libsmbclient against required libtdb and libwbclient
      testsuite/libsmbclient use source3 in the path of the C and LFLAGS
      s3: normalize "Changing password for" msg IDs and STRs
      s3: let the pam_winbind po files reference the correct location
      s3: go straight to winbindd_dual_pam_auth() in case of !NT_STATUS_OK

Luca Olivetti (1):
      Fix bug #7263 - Unable to print using Samba 3.5.1 and cups-1.1.23-40.46 on SLES10.

Lukasz Zalewski (4):
      Modifications extending functionality of newuser cmd and new net group set of commands for group related operations on ldb
      Modifications extending functionality of newuser cmd and new net group set of commands for group related operations on ldb
      make test modules for net group set of commands and modification to the newuser to include additional parameters
      Fix to undo nasty hack for for grouptype conversion

Marcel Ritter (2):
      Simple fix to prevent crash for non-pac principals
      Install spn_update_list to setup/ dir

Marcin Gryszkalis (1):
      s3: Show share path in swat statuspage

Matt Kraai (8):
      Change uint_t to unsigned int in lib/replace
      Change uint_t to unsigned int in lib/crypto
      Change uint_t to unsigned int in lib/talloc
      Change uint_t to unsigned int in lib/util
      Change uint_t to unsigned int in libcli
      Change uint_t to unsigned int in pidl
      Change uint_t to unsigned int in source3
      Change uint_t to unsigned int in source4

Matthew McGillis (6):
      always pass filename as const char
      Consolidate all get SEC_DESC into single procedure get_secdesc
      Consolidate all set SEC_DESC into single procedure set_secdesc
      added support for a -I flag
      added documentation for the -I flag
      Fix bug with incorrect flag values for inherited ace in some cases.

Matthias Dieter Wallnöfer (677):
      s4:SAMR RPC - Fix the criteria for group searches
      s4:provision_users.ldif - Remove system objects from the wrong place
      s4:provision_users.ldif - Simple reordering
      s4:provision_users.ldif - Fix up errors on existing entries
      s4:provision_users.ldif - add the restant part of the objects needing for RODC support
      s4:provision_users.ldif - Add additional BUILTIN objects
      s4:provision_users.ldif - Add objects for IIS
      s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
      s4:libcli/util/tstream.c - Need to include "system/network.h"
      s4:include/includes.h - Need to include "system/network.h"
      Revert "s4:include/includes.h - Need to include "system/network.h""
      s4:mark the SYSTEM control always as non-critical
      s4:Heimdal build - never require the NSS wrapper for Heimdal Kerberos
      NSS wrapper - add dependency to "nsstest"
      s4:UID wrapper - Fix includes
      s4:UID wrapper - Make it work on older distributions
      s4:subtree_delete - "NULL" as format string isn't allowed on FreeBSD
      s4:Remove "Py_RETURN_NONE" compatibility code
      pidl - Remove "Py_RETURN_NONE" compatibility code
      check_python.m4 - Raise the minimum python version up to 2.4
      ldb_match - Ignore ":dn" part of extended matches for now
      s4:getopt.py - set the password callback only when no password has been provided
      s4:auth/credentials/credentials.c - Initialise the "lm_response" and "nt_response" structures
      s4:server.c - use always "return" instead of "exit" in the "binary_smbd_main" function
      s4:util.c - Corrected the location of the "Directory Service" object
      s4:popt_common.c - fix intendation
      s4:loadparm.c - the logfile parameter value needs to be duplicated
      s4:loadparm.c - prevent memory leaks
      s4:dcesrv_lsa.c - remove a superfluous empty line
      s4:provision.c - "provsion_store_self_join" - don't set the realm if it's NULL
      s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008
      s4:AD content - adequate some revision levels to match Windows Server 2008
      s4:AD content - Implement the new password settings container
      s4:provision.py - try to use other addresses than "127.0.0.x" and "::1"
      s4:dsdb/util.c - Use LDB result constants in some more helper functions
      s4:password_hash - Fix up request message pointers
      s4:partition DSDB module - Cosmetic fixups
      s4:operational LDB module - enable support for passing referrals through it
      s4:torture/ldap/basic.c - add some "const"
      s4:registry/regf.c - specify the context when freeing the "regf" variable
      s4:netlogon RPC - fix the indentation
      s4:SAMLDB module - ignore referrals
      s4:LDAP server - Enable support for returning referrals through it
      s4:partition DSDB module - change the search and domain scope control handling
      s4:partition DSDB module - Generate basic referrals
      s4:torture/ldap/basic.c - add a basic test for referral return
      s4:cldap_server - make it "signed-safe"
      s4:auth - make some parts "signed-safe"
      s4:ldap_server - make it "signed-safe"
      s4:DNS update - change "i" to be unsigned
      s4:dcesrv_samr.c - Remove unused variable
      .gitignore - ignore display of "mit_samba.so"
      s4:script/installmisc.sh - install "dns_update_list" to target setup folder
      s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"
      s4:LDB - cosmetic fix for a "for" loop
      s4:epmapper RPC - make this one "signed-safe"
      s4:remote RPC - make this one "signed-safe"
      s4:spoolss RPC - make this one "signed-safe"
      s4:unixinfo RPC - make this one "signed-safe"
      s4:srvsvc RPC - make this one "signed-safe"
      s4:srvsvc RPC - revert one unsigned integer "i" back to signed
      s4:echo RPC - make this one "signed-safe"
      LDB:NSS - make LDB "signed-safe" on counter variables
      s4:dcesrv_samr - Fix up "EnumDomainGroups" and "QueryDisplayInfo" calls
      s4:dcesrv_samr - Also "OpenGroup" needs to support universal groups
      s4:torture/rpc/samr - enhance the "EnumDomainGroups" test regarding universal groups
      s4:torture/rpc/samr - Fix up SAMR-USERS test
      s4:srvsvc RPC - fix up the "ntvfs_connect" in "srvsvc_create_ntvfs_connect"
      s4:srvsvc RPC - "srvsvc_create_ntvfs_connect"
      s4:samdb.c - Make it signed-safe
      s4:ldif_handlers - Use "unsigned int" for counting purposes
      s4:provision - use the new "interface_ips" python call to detect the right host IPv4 address
      s4:operational LDB module - use right memory context int "construct_primary_group_token"
      s4:sam.c - change variable types to unsigned in "sids_contains_sid"
      s4:sam.c - cosmetic indentation fix
      s4:sam.c - make "authsam_expand_nested_groups" public
      s4:operational LDB - implement the "tokenGroups" constructed attribute
      s4:operational LDB module - make the counters unsigned
      s4:operational LDB - don't accidentally "ate" search helper attributes if we need them for more constructed attributes
      s4:ldap.py - add test for "tokenGroups"
      s4:ldap.py - give the "primaryGroupToken" test a better name
      s4:auth/sam.c - change base context for the "tmp_ctx" context in "authsam_expand_nested_groups"
      s4:torture/winbind/struct_based.c - fix up (un)signedness of a function argument
      s4:torture/rpc/samr.c - make some argument of function "test_SamLogon_with_creds" constant
      s4:torture/rpc/samr.c - add some decision possibility constants to some switch
      s4:cracknames - Change two counter variables to unsigned
      s4:samdb_privilege.c - Change two counter variables to unsigned
      s4:kcc - Change some counter variables to be unsigned
      s4:dcesrv_samr_AddAliasMember - wrap a long "DEBUG" statement
      s4:wrepl_server - change also here the counter variables to "unsigned"
      s4:repl - change also here the counter variables to "unsigned"
      s4:dsdb/util - Change also here counters to "unsigned"
      s4:drsuapi RPC - Change also here counters to "unsigned"
      s4:samr RPC - Change some counters to be "unsigned" where needed
      s4:lsa RPC - Change some counters to be "unsigned" where needed
      s4:lsa RPC - fix up "gendb_*" result codes
      LDB:tools - change counters to be unsigned
      s4:libregistry - change counters to be "unsigned"
      s4:provision.reg - call us Windows 2008 from the current version point of view
      s4:registry library - make "reg_ldb_pack/unpack_value" more robust
      s4:registry library - fix up "reg_ldb_set_value"
      s4:lib/registry/ldb.c - fix trailing whitespaces
      s4:schema_syntax.c - Change also here counters to "unsigned" where needed
      s4:schema - Change also here counters to "unsigned" where needed
      s4:partition LDB module - change counter variables to "unsigned" where appropriate
      s4:rootdse LDB module - change counter variables to "unsigned" where appropriate
      s4:resolve_oids LDB module - change counter variables to "unsigned" where appropriate
      s4:schema_data LDB module - change counter variables to "unsigned" where appropriate
      s4:proxy LDB module - Change counter variables to "unsigned" where appropriate
      s4:kludge_acl LDB module - change counter variables to "unsigned" where appropriate
      s4:linked_attributes LDB module - change counter variables to "unsigned" where appropriate
      s4:acl LDB module - change counter variable to "unsigned"
      s4:anr LDB module - change counter variable to "unsigned"
      s4:objectclass LDB module - change counter variabls to "unsigned" where appropriate
      s4:objectguid LDB module - change counter variables to "unsigned" where appropriate
      s4:ranged_results LDB module - change counter variables to "unsigned" where appropriate
      s4:local_password LDB module - change counter variables to "unsigned" where appropriate
      s4:repl_meta_data LDB module - change counter variables to "unsigned" where appropriate
      s4:extended_dn_out LDB module - change counter variables to "unsigned" where appropriate
      s4:ldif_handlers - Change "unsigned int" to "uint32_t" which fits better here
      LDB:map - make LDB "signed-safe" on counter variables where appropriate
      LDB:LDAP backend - change a counter variable to "unsigned"
      LDB:SQLITE3 backend - change counter variables to "unsigned" where appropriate
      LDB:TDB backend - change counter variables to "unsigned" where appropriate
      s4:ldb_ldap.c - fix indentation
      s4:LDB TDB index code - reintroduce accidentally removed code part
      LDB:common - Change counters to "unsigned" where appropriate
      LDB:paged results module - change counters to "unsigned" where appropriate
      LDB:paged searches module - change counters to "unsigned" where appropriate
      LDB:rdn name module - change counters to "unsigned" where appropriate
      LDB:sort module - change counters to "unsigned" where appropriate
      LDB:asq module - change counters to "unsigned" where appropriate
      Revert "s4:script/installmisc.sh - install "dns_update_list" to target setup folder"
      s4:"dns_update_list" file: install it properly into the private directory
      libcli/auth/schannel_state_tdb.c - fix an obviously wrong error handling
      s4:netlogon RPC - "LogonGetDomainInfo" - make the call compatible with >= Windows 2008
      s4:torture/rpc/netlogon.c - "LogonGetDomainInfo" test - make it compatible against Windows Server 2008
      s4:winbind/wb_cmd_getgroups.c - fix up warnings
      s4:winbind - use "unsigned" variables where possible
      s4:lib/registry/ldb.c - fix up registry backend to be more robust
      s4:winreg RPC - don't crash when incoming data wasn't correctly specified
      s4:registry/ldb.c - if "name" isn't set we should return WERR_INVALID_PARAM
      s4:winreg RPC - fix up the "QueryValue" call to work against the enhanced torture test
      s4:libnet_become_dc - change counter variables to "unsigned" where they count LDB objects
      s4:libnet - change variables to "unsigned" where needed
      s4:util.c - "dsdb_check_optional_feature" - counter should be "unsigned"
      s4:provision.py - small output improvement
      Revert "s4:provision Improve the handling of provision errors"
      NSS:winbind_struct_protocol.h - fix typo
      Reintroduce "s4:provision Improve the handling of provision errors""
      s4:registry - ldb.c - Move the "val" structure
      s4:registry - ldb.c - Consider result values in "reg_ldb_pack_value"
      s4:registry - ldb.c - remove superfluous "query" variable
      s4:registry - ldb.c - check more for possible "Out of memory" circumstances
      s4:registry - ldb.c - fix up the memory handling in "reg_ldb_unpack_value"
      s4:registry - ldb.c - fix up a strange LDB filter
      s4:registry - ldb.c - provide a mechansim for storing UTF8/binary REG_SZ/REG_EXPAND_SZ values
      s4:registry - ldb.c - provide a mechanism for storing UTF8/binary REG_DWORD values
      Revert "s4-smbtorture: skip extended SetValue test against Samba (both dont survive)."
      s4:registry - util.c - add harder checks for inputs on "reg_val_data_string"
      s4:registry - add support for REG_QWORD values
      s4:registry - fix up the output of hexadecimal values
      s4:registry - local testsuite - add a test for REG_QWORD
      s4:registry - util.c - move the "REG_NONE" case in the conversion functions on top of the switch
      s4:registry - util.c - treat unsupported and binary values as the same in the conversion functions
      s4:registry - rpc - don't crash when communication partner isn't available
      s4:dsdb/kcc/*.c - fix up wrong typed counters
      s4:registry - introduce the "REG_DWORD_BIG_ENDIAN" datatype
      s4:registry - add a test for the "REG_DWORD_BIG_ENDIAN" datatype
      s4:registry - check also for other registry value types in the generic test
      s4:registry - use a macro for reverse byte order
      s4:dsdb - fix up warnings
      s4:resolve_oids LDB module - not really a change but a nicer method to call "talloc_reference"
      security.idl - push generated code diff
      s4:wb_cmd_getgroups - fix failure in s4 winbind's "getgroups"
      libcli/auth/schannel_state_tdb.c - fix a memory leak
      s4:auth/kerberos/kerberos.c - fix also here a memory leak
      heimdal - free always "ctx->password" when it isn't needed anymore
      heimdal - fix overlapped identifiers in the "krb5" library
      heimdal - remove unused variable
      kerberos - set the memory to "0"s before freeing the password to prevent security issues
      s4:registry - "LDB backend" - Fix up the storage of binary REG_SZ/REG_EXPAND_SZ values
      s4:registry - "LDB backend" - fix up memory allocation for dynamic integers
      s4:torture WINREG - enhance test for "DWORD_BIG_ENDIAN" type
      s4:torture WINREG - enhance test for "QWORD" type
      s4:registry - handle type "DWORD_BIG_ENDIAN" as type "DWORD"
      s4:WINREG RPC - specify the performed create action for "CreateKey"
      s4:registry - "LDB backend" - don't test for "0" as string termination on binary and unknown typed values
      s4:WINREG RPC - we support only non-volatile keys
      s4:torture - WINREG RPC - reactivate test "SetValueExtended" for s4
      s4:WINREG RPC server - don't check for the "name" size in "EnumValue"
      s4:registry - "LDB backend" - reg_key_get_info - adapt max. subkey and value length
      s4:regshell - don't return an error code if we get a security descriptors error
      s4:regshell - here we don't need a newline - "ctime" itself provides one
      s4:registry - "LDB backend" - fix indentation
      s4:registry - "LDB backend" - make the key argument "const" of ldb_get_default_value
      s4:registry - "LDB backend" - "ldb_get_default_value"
      s4:registry - "LDB backend" - "reg_key_get_info"
      s4:registry - "LDB backend" - "reg_ldb_unpack_value"
      s4:regtree - fix counter variables to be "unsigned"
      s4:registry - "patchfile.c" - fix a typo
      s4:registry - "patchfile.c" - consider also the hives in the generated diffs
      s4:registry - "patchfile" - add comments
      s4:registry - "patchfile_dotreg.c" - fix a memory leak
      s4:registry - "patchfile_preg.c" - also here don't accumulate the memory usage
      s4:registry - "util.c" - "reg_string_to_val" - consider always the return values
      s4:registry - "patchfile" - add more "talloc_free"s to save memory
      s4:registry - "patchfile" - initialise the data blobs
      s4:registry - "patchfile" - check if strings could be allocated
      s4:registry - "RPC backend" - use "talloc_steal" and not "talloc_reference"
      s4:registry - registry.h - add memory contexts for delete value/key functions
      s4:registry - adaptions for "add memory contexts for delete value/key functions"
      s4:registry - "dir.c" - fix up dynamic memory allocation operations
      s4:registry - "util" - fix up memory allocated data
      s4:registry - "util" - make "reg_key_add_abs" consistent with "reg_key_del_abs"
      s4:registry - "util" - add also a memory context argument for "reg_key_del_abs"
      s4:registry - adaptions for "add also a memory context argument for "reg_key_del_abs"
      s4:registry - "util" - remove "const" from "reg_abs_path"
      s4:registry - add more "W_ERROR_HAVE_NO_MEMORY" invocations (on talloc'ed stuff)
      s4:registry - "samba.c" - add a "talloc_free"
      s4:WINREG RPC - add also here a "W_ERROR_HAVE_NO_MEMORY"
      s4:registry - "util.c" - initialise "result" in "reg_key_add_abs"
      s4:registry - "local" - add also here more "W_ERROR_HAVE_NO_MEMORY" macro tests
      s4:registry - "patchfile" - add another "W_ERROR_HAVE_NO_MEMORY" macro call
      s4:registry - "reg_import_hive_key" - change a "talloc_steal" into a "talloc_reference"
      s4:registry - "reg_key_del/add_abs": call "talloc_free" only on valid objects
      convert_string_talloc_convenience - print out the input buffer in a better way (using dump_data since it isn't always directly readable)
      s4:ldb_modules/util.c - fix two counter variables to be "unsigned"
      s4:registry - "LDB backend" - revert the binary storage of "REG_SZ", "REG_DWORD" and "REG_QWORD"
      Revert "s4:torture - WINREG RPC - reactivate test "SetValueExtended" for s4"
      s4:registry - "LDB backend" - revert the length check for UTF16 strings
      s4:registry - "LDB backend" - fix indentation
      s4:registry - "reg_ldb_pack_value" - provide workarounds when the server receives non-standard data.
      s4:WINREG torture - fix an error (missing "break" in a "switch")
      s4:auth/credentials/credentials.c - initialise more content
      WHATSNEW4.txt - updates
      howto4.txt - improve the content of chapter 2bis
      s4:registry/util.c - fix indentation
      s4:registry - move the UTF16 length calculation for "reg_key_get_info" into the RPC server code
      s4:registry/ldb.c - Always check the "name" attribute for != NULL
      s4:registry/ldb.c - Break with "NULL" as an error case when the data doesn't fit in the "reg_ldb_pack_value" function
      s4:.gitignore - update it for the new heimdal release
      s4:registry/tests/generic.c - fix the DWORD_* types test to work also against big endian platforms
      s4:registry/util.c - remove those "talloc_free"s
      s4:installmisc.sh - fix location of "dnspython" library
      s4:registry/tests/hive.c - make the test compatible with big-endian platforms
      s4:registry/tests/diff.c - try to make also this test compatible with big-endian platforms
      s4:torture/basic/denytest.c - use "typeof" in a better supported syntax
      s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available
      libcli/nbt/dns_hosts_file.c - change "ULONG_MAX" into "UINT32_MAX"
      wbclient/wbclient.c - fix a typo
      s4:python/samba/__init__.py - import "sys" for "ensure_external_module" method
      Revert "s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available"
      LDB:sample_module.c - remove code parts which generate warnings
      s4:auth/ntlm/auth_developer.c - "fixed_challenge_get_challenge" - fix the assignment of the challenge
      s4:torture - remove unused variables
      s4:net tool - add a "discard_const_p" to suppress the "PySys_SetArgv" warning
      s4:param/secrets.c - add some "char *" casts
      s4:provision - add a comment which explains why "paths.dns_keytab" is stored without path reference
      s4:pyregistry.c - fix indentation
      s4:WHATSNEW4.txt - further updates and corrections
      s4:winbind/wb_server.c - fix indentation
      s4:registry - "regf backend" - fix it up regarding REG_DWORD/REG_DWORD_BIG_ENDIAN_VALUES
      LDB:python bindings - also empty LDB message elements should have a python representation
      LDB:sample_module - reintroduce accidentally removed "ldb_msg_add_fmt" statement
      s4:registry - "patchfile_preg.c" - use "sizeof(uint32_t)" for some size specifications
      s4:registry - "patchfile_preg.c" - fix the read operation of the data length on big-endian platforms
      s4:WAF buildsystem - support out of "source4" directory builds
      s4:registry - "REGF backend" - don't ignore wrong-sized REG_DWORD/REG_DWORD_BIG_ENDIAN values
      s4:registry - "patchfile_preg.c" - make a SIVAL statement nicer
      s4:registry - "patchfile_preg.c" - assign a better type to the "i" counter variable
      s4:LDB - fix up "LDAPI" test
      s4:registry - "patchfile_preg.c" - fix a datatype
      s4:registry - "patchfile_preg.c" - fix indentation
      s4:registry - "patchfile_preg.c" - use more "sizeof"s on length specification
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test
      s4:torture - "dbspeed" test - add newlines as we have them in the other failure messages
      s4:samdb_server_site_dn - free unused DNs in the right way
      s4:dbspeed torture - remove unneeded newlines on "torture_result"
      s4:dbspeed torture - improve also the TDB code part
      s4:torture/ldap/ldap_sort.c - There should be used the "base_dn" not the "root_dn" for the sort test
      s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions
      s4:auth/auth_sam_reply.c - fix counter types
      s3/s4:netlogon IDL - fix up "struct netr_SamInfo6" regarding the "forest" attribute
      s4:objectclass LDB module - remove a unneeded newline
      Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions"
      s4:remove "samdb_root_dn", "samdb_base_dn", "samdb_config_dn" and "samdb_schema_dn"
      s4:dsdb/common/util.c - add a call which determines centrally the forest DNS domainname
      s4:use "samdb_forest_name" for the forest DNS domainname lookup
      s4:acl/descriptor LDB module - distinguish between root and default basedn
      s4:CLDAP - "fill_netlogon_samlogon_reponse" - check for out of memory
      s4:fill_netlogon_samlogon_response - some rework of the detection code
      s4:dcesrv_netr_DsRGetDCNameEx2 - provide a much better implementation
      s4:torture/netlogon - enhance test for "dcesrv_netr_DsRGetDCNameEx2"
      s4:fill_netlogon_samlogon_reponse - fix a typo
      s4:samdb_server_site_name - fix indentation
      s4:"samdb_server_site_name" uses - proof for out of memory
      s4:kdc/db-glue.c - fix integer counter types
      s4:kdc/wdc-samba4.c - fix integer counter types
      s4:kdc/db-glue.c - use "TALLOC_FREE" insteal of "talloc_free" for the "priv" context
      s4:dsdb/dns/dns_update.c - fix a typo
      s4:torture/rpc/netlogon.c - fix typo
      s4:netlogon RPC - "fill_one_domain_info" - use "lp_workgroup" for the DC short domainname discovery
      s4:netlogon RPC server - fix a counter variable type
      s4:util - add a function which finds the matching client site using the client address
      s4:CLDAP server - make use of the new "samdb_client_site_name" call
      s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information
      s4:torture - DsRAddressesToSitenames - enhance the testsuite
      s4:dcesrv_netr_GetAnyDCName - improve the call according to the MS-NRPC documentation
      s4:torture - GetAnyDCName - adaptions
      s4:dcesrv_netr_DsRGetSiteName - provide an implementation according to the MS-NRPC docs
      s4:torture - DsRGetSiteName - move "skip" statement before the "computer_name" check
      s4:dcesrv_netr_DsrGetDcSiteCoverageW - provide a basic implementation
      s4:torture - DsRGetDcSiteCoverageW - adapt test to check for the sitename
      s4:netlogon RPC server - we don't need "are we DC" proofs
      s4:knownfail - remove tests which should pass
      Revert "s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch"
      Revert "s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information"
      s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the client site information
      s4:wb_cmd_getdcname.c - fix s4 winbind up regarding the new correct "GetAnyDCName" behaviour
      s4:kcc_periodic.c - fix counter types
      s4:torture - DsRAddressToSitenames[Ex]W testsuite - make it IPv4-only compatible
      s4:fill_netlogon_samlogon_response - use "lp_workgroup" for the short netbios domainname
      s4:fill_netlogon_samlogon_response - reorder assign operations (to be consistent)
      nbt: samlogon/netlogon structures - unify denominations
      s4:cldap_server/netlogon.c - handle the domain SID correctly
      Revert "s4:web_server: use tsocket_address functions to get the local ip and port"
      s3:libads/ldap.c - fix a build breakage
      s4:LogonGetDomainInfo - remove singular "dNSHostName" check - this doesn't belong here
      s4:LogonGetDomainInfo - fix indentation
      s4:LogonGetDomainInfo - fix a potential crash source
      s4:py_nttime2string - removed unused variable "nt2"
      librpc:dcerpc_error.c - fix a warning
      s4:net utility - add an optional password attribute to "net user add"
      s4:samdb python bindings - remove idmap creation stuff from this call
      s4:net utility - remove unixname parameter of samdb.newuser
      s4:net utility - make outprinted description comments more consistent
      s4:blackbox/test_kinit.sh - Test the new "net user add <user> [<password>]" syntax
      s4:samldb LDB module - update the copyright notice
      s4:samldb LDB module - make "samldb_prim_group_users_check" synchronous again
      s4:samldb LDB module - make "samldb_member_check" synchronous again
      s3:provision_basedn_modify.ldif - add "msDS-NcType" attribute and fix comments
      s4:selftest - change test passwords
      s4:dsdb/util.c - Add a new function for retrieving password change attributes
      s4:acl ldb module - fix typos
      s4:dsdb: add new controls
      s4:password_hash - Various (mostly cosmetic) prework
      s4:password_hash - Rework unique value checks
      s4:password_hash - Rework to handle password changes
      s4:samdb_set_password/samdb_set_password_sid - Rework
      s4:samdb_set_password - adapt it for the user password change handling
      s4:passwords.py - add a python unittest for additional testing of my passwords work
      s4:password_hash LDB module - don't break the provision
      s4:password hash LDB module - check that password hashes are != NULL before copying them
      s4:password_hash LDB module - quiet a warning
      s4:password_hash LDB module - we might not have a cleartext password at all
      README.Coding - cosmetic changes
      s4:torture/rpc/netlogon.c - don't use constant "AF_LOCAL" but do use "AF_UNIX" instead
      s4:provision_users.ldif - Fix typos in user/group objects
      s4:provision_basedn_modify.ldif - fix up "maxPwdAge"
      s4:provision_users.ldif - fix up Administrator's "userAccountControl"
      s4:provision.ldif - fix up "NTDS Quotas" "systemFlags"
      s4:provision.ldif - "passwordSettingsContainer" add "showInAdvancedViewOnly"
      s4:provision_users.ldif - On Windows Server >= 2008 security principal S-1-5-20 doesn't exist anymore
      s4:provision.ldif - add more Windows 2008 domain operations
      s4:provision.ldif - add IP security objects as they exist on Windows Server
      s4:provision_configuration.ldif - "sites" object
      s4:provision_configuration.ldif - The "NTDS Quotas" object is system-critical
      s4:provision_configuration.ldif - set the right schedule on the default site in the NTDS site settings
      s4:provision*.ldif - always set the "msDS-NcType" attribute correctly
      s4:provision_configuration.ldif - "CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa" operation is of version 3
      s4:provision_configuration.ldif - the revision level of "Windows2003Update" should obviously be 10
      s4:provision_configuration.ldif - add more Windows 2008 forest operations
      s4:provision_users.ldif - fix up and reorder the well-known security principals
      s4:provision_configuration.ldif - add more extended rights objects
      s4:domain functional level - it is also specified in the domain object under partitions
      s4:domainlevel.py - update the script to handle both domain level occourrences on s4
      ldb:ldb_msg.c - use result constant
      s4:domainlevel - handle exceptions more precisely
      s4:samldb LDB module - remove unused variables
      s4:dsdb_cache LDB module - fix a typo
      s4:net domainlevel tool - fix up the error handling as Jelmer suggested
      s4:repl_meta_data LDB module - fix counter types
      s4:smb_server/smb/trans2.c - remove unused define "DEFAULT_SITE_NAME"
      s4:operational LDB module - fix warnings (missing parameters, unused variable)
      s4:ntvfs/posix/pvfs_wait.c - fix a "calculated value unused" warning
      s4:ntvfs/ipc/vfs_ipc.c - add more "const" in order to fix warnings
      s4:torture/raw/open.c - remove unused variables and fix error handling
      s4:torture/rap/rap.c - quiet discard const warning
      s4:setup/*.ldif - remove unneeded "cn" attributes
      s4:"rdn_name" LDB module - fix the creation of the RDN attribute (try to normalise it)
      s4:LogonGetDomainInfo - allow to set DNS hostname for the first time
      s4:dsdb_add_user - check the "cn"/"account_name" length (should be >= 1)
      s4:dsdb_lookup_rids - "unsigned" counters fit better than "signed" in this case
      s4:dsdb_enum_group_mem - use "unsigned" counters
      s4:torture/rpc/samr.c: Fix the "ValidatePassword" test
      flags.h - fix comment for "GTYPE_SECURITY_UNIVERSAL_GROUP" constant
      s4:client/client.c - fix "asprintf"s
      s4:regshell - don't use negative exit codes
      s4:regshell - fix an "asprintf"
      s4:libcli/clideltree.c - fix "asprintf"s
      s4:ntvfs/nbench/vfs_bench.c - change a "asprintf" into a "talloc_asprintf"
      s4:ntvfs/simple/svfs_util.c - change an "asprintf" into a "talloc_asprintf"
      s4:param/loadparm.c - fix "asprintf" call
      s4:scripting/python/modules.c - fix "asprintf" calls
      s4:smbd/pidfile.c - fix "asprintf" calls
      s4:utils/ntlm_auth.c - fix "asprintf" calls
      s4:web_server/wsgi.c - fix "asprintf" call
      s4:client/client.c - we don't need "&ctx" for talloc calls
      s4:web_server/wsgi.c - provide a better out-of-memory handling for an "asprintf" call
      nss_wrapper/testsuite.c - make sure to test always the "NSS wrapper" calls
      s4:auth/credentials/credentials.c - initialise "password_last_changed_time"
      s4:web_server/wsgi.c - free the "env" and "inputstream" objects on an "asprintf" failure
      s4:rpc_server/dcesrv_auth.c - Fix a RPC issue in conjunction with Windows 2000
      Revert "s4:rpc_server/dcesrv_auth.c - Fix a RPC issue in conjunction with Windows 2000"
      s4:dsdb/common/util.c - fix a counter variable
      s4:dsdb_module_search_dn - add code to handle NULL format string
      s4:dsdb/samdb/ldb_modules/util.c - make sure to always free temporary data
      s4:ldap.py - add more test cases to show invalid primary group change behaviour
      s4:samldb LDB module - rework the group change code to be again synchronous
      s4:ldap.py - add a test which shows the modification behaviour of important attributes
      s4:samldb LDB module - deny delete operations on some important attributes
      ldb:ldb_tdb/ldb_tdb.c - quiet a warning regarding TDB -> LDB error code conversions
      s4:tests/python/passwords.py - fix filter
      s4:torture/rpc/netlogon.c - add another "LogonGetDomainInfo" testcase
      s4:dcesrv_netr_DsrEnumerateDomainTrusts - fix an integer type
      s3/s4:netrEnumerateTrustedDomains - this call returns a "NTSTATUS" result
      s4:dsdb_load_udv_v1 - "uint32_t" counter type fits better than "unsigned int"
      ldb:ldb_msg_add_steal_string - prevent also there the addition of strings with length 0
      s4:samldb LDB module - start on a sequential trigger implementation
      s4:lib/ldb/pyldb_util.c - add a cast to quiet a warning
      s4:ldb_msg_element_compare - fix typo in comment
      s4:provision - fix typo in substitution variable
      s4:ldap.py - make sure that also the "posixuser" will be deleted on test breakages
      s4:urgent_replication.py - specify the "dnsRoot" attribute which is requested on "crossRef" entries
      s4:descriptor LDB module - cosmetic fixup
      s4:acl LDB module - fix counter types where appropriate
      s4:ridalloc LDB module - add more "talloc_free"s where useful
      s4:ldap_server/ldap_backend.c - send back also the extended error message if it exists
      ldb:ltdb_filter_attrs - fix a counter variable type
      s4:dsdb/common/util.c - provide a better implementation of the "samdb_msg_add_(add/del)val" calls
      s4:rdn_name LDB module - remove "rdn_name_find_attribute"
      s4:rdn_name LDB module - use "ldb_msg_remove_attr" for deleting attributes
      s4:ldap.py - enhance the RDN name test to show that invalid "name" attributes are allowed on add operations
      s4:get_last_structural_class - only real structural classes can be candidates for fetching the last one
      s4:samldb LDB module - this codepart isn't needed due to the objectclass LDB module
      ldb:ldb_msg_remove_attr - provide a better implementation
      s4:password_hash LDB module - adapt the module to the new "ldb_msg_remove_attr" behaviour
      s4:objectclass LDB module - fix header and add my copyright
      s4:objectclass LDB module - use "ldb_oom" for expressing out of memory
      s4:objectclass LDB module - fix error result if an entry doesn't contain a structural objectclass
      s4:objectclass LDB module - this "talloc_steal" is not necessary
      s4:objectclass LDB module - explain why the search can return with an empty return
      s4:objectclass LDB module - fix counter variable types
      s4:objectclass LDB module - remove duplicated code
      s4:objectclass LDB module - cosmetic change
      s4:objectclass LDB module - finally implement the correct entry rename protections
      s4:ldap.py - enhance the rename tests to demonstrate the functionality
      s4:samldb LDB module - finally we can remove the RDN check
      s4:objectclass LDB module - instanciate the schema variable centrally on the "ac" context creation
      s4:dsdb - introduce a new "objectclass_attrs" LDB module which performs the objectclass attributes checking
      s4:remove the "validate_update" LDB module - the task is now handled by the far more complete "objectclass_attrs" LDB module
      s4:samldb LDB module - adjust the module to set always a "defaultObjectCategory" on objectclass add operations
      s4:objectclass LDB module - remove "fix_check_attributes"
      s4:acl LDB module - adaption for "objectclass_attrs" module
      s4:acl LDB module - LDB attribute names should be compared using "ldb_attr_cmp" or "strcasecmp"
      s4:ldap.py - enhance the attributes testcase to demonstrate how the attributes are checked against the schema and the specified objectclasses
      s4:objectclass LDB module - rework the code which handles the objectclasses modification
      s4:ldap.py - add some "objectclass" behaviour tests
      s4:samba_dsdb LDB module - enhance/fix module rule comments
      s4:samba_dsdb LDB module - fix typos
      s4:rdn_name LDB module - move the "distinguishedName" write prevent check here
      s4:objectclass_attrs LDB module - move the single-valued attribute check into this module
      ldb:pyldb.c - we cannot use "ldb_dn_compare" if both message DNs are NULL in "py_ldb_msg_compare"
      s4:instancetype LDB module - prevent all types of "instanceType" manipulation
      s4:ldap.py - add a test to demonstrate the 'instanceType' behaviour
      s4:samba_dsdb LDB module - move the "objectclass_attrs" module back
      s4:dcesrv_samr_AddGroupMember - also the error code "LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS" is allowed
      s4:dcesrv_samr_Add/DelGroupMember - remove the account type check
      s4:dcesrv_samr_AddAliasMembership - Merge the two error blocks into one
      s4:dcesrv_samr_DeleteAliasMember - add more braces to fit better the coding styles
      s4:dcesrv_samr_GetAliasMembership - fix type of counter variables
      s4:dcesrv_samr_Add/DeleteAliasMember - provide better NTSTATUS return codes when something didn't work
      s4:samldb LDB module - don't create multiple "ac" module contexts on modify operations
      s4:samldb LDB module - fix up the case when the old and new "primaryGroupID" are the same
      s4:ldap.py - add testcase which demonstrates the reset of the "primaryGroupID"
      ldb:ldb_sqlite3 backend - remove checks which are now done elsewhere
      ldb:ldb_sqlite3 backend - remove a warning which has already been resolved
      s4:ldap.py - check if the "name" of an entry was really ignored
      s4:ldap.py - check how the directory server behaves when the 'distinguishedName' attribute wasn't set correctly
      s4:passwords.py - use "self" before "enable_account" to make really sure which LDB connection should be used
      s4:passwords.py - set the "dSHeuristics"
      s4:rootdse LDB module - use LDB result constants
      s4:ldif_read_prefixMap - don't cause memory leaks on error conditions
      s4:dcesrv_samr_EnumDomainUsers - make this call look more similar to "EnumDomainGroups" and "EnumDomainAliases"
      s4:dcesrv_samr_EnumDomainAliases - mostly small fixes
      s4:dcesrv_samr_EnumDomainAliases - return an empty array also when no entry was returned
      s4:dcesrv_samr_EnumDomainGroups - mostly small fixes
      s4:dcesrv_samr_QueryDomainInfo - allocate the "info" structure only when really needed
      s4:dcesrv_samr_QueryUserInfo - minor fixes
      s4:dcesrv_samr_QueryGroupInfo - make it more like "QueryAliasInfo"
      s4:dcesrv_samr_QueryAliasInfo - return "NT_STATUS_NO_SUCH_ALIAS" when it wasn't found
      s4:dcesrv_samr_EnumDomainGroups/Aliases - when we don't get a SID then the database is corrupted
      s4:dcesrv_samr_GetAliasMembership - provide a correct implementation
      s4:torture - SAMR testsuite - now we do support "GetAliasMembership" as expected
      s4:password_hash LDB module - fix comment
      s4:password_hash LDB module - this does really deactivate the MS LAN manager hash
      s4:dcesrv_samr_QueryGroupMember/GetMembersInAlias - unify the structure
      s4:dcesrv_samr_GetGroupsForUser - return error code if a SID wasn't found
      s4:fix allocated control OIDs for "password_hash" LDB module
      s4:SAMR server - on alias search operations do never use the domain DN as base dn
      s4:SAMR server - cosmetic fix
      s4:linked_attributes LDB module - cosmetics
      s4:linked attributes LDB module - strip trailing whitespaces
      s4:provision.py - we do now support the "Windows 2000 Native" domain function level
      s4:ldap.py - add another test about linked attributes
      s4:ldif_handlers.c - fix warning
      s4:dcesrv_netr_DsRAddressToSitenamesExW - fix the read of the IP packet version
      s4:torture/rpc/netlogon.c - activate "AddressToSitenames" tests which do run against s4
      s4:torture/rpc/netlogon.c - make sure that the address family is set in little endian in the "AddressToSitenames" tests
      s4:dcesrv_netr_DsRAddressToSitenamesExW - fix the detection of the address family in a better way
      s4:objectclass LDB module - move "mem_ctx" initialisation lower
      s4:ldap_backend.c - fix a small error (use "ModifyResponse" rather than "AddResponse")
      s4:ldap_backend.c - fix crash bugs when we got in error situations with "res" still set to "NULL"
      s4:cldap_server.c - here the counter variable should be "signed"
      s4:cldap_server/rootdse.c - simplify the code a bit
      s4:objectclass LDB module - handle the case when there is a retry to add the root basedn
      s4:objectclass LDB module - add an error message when someone tries to add entries without objectclasses
      s4:objectclass LDB module - add a better message when the parent DN is invalid
      s4:objectclass LDB module - use the old DN when displaying error messages
      s4:rootdse LDB module - refactor error messages
      s4:rootdse LDB module - Return "UNWILLING_TO_PERFORM" when no attribute fits on a change
      s4:rootdse LDB module - protect add and delete operations on the rootdse entry
      s4:rootdse LDB module - strip trailing whitespaces
      s4:objectclass LDB module - disable delete operations when "SYSTEM_FLAG_DISALLOW_DELETE" is specified
      ldb:python bindings - let also "py_ldb_delete" support controls
      ldb:python bindings - some small cleanup & improvements in "py_ldb_add"
      ldb:api.py - add a small test for the enhanced "py_ldb_delete" syntax
      s4:python/samba/__init__.py - now specify the "relax" control for the delete operation before the provision
      ldb:ldb_dn.c - don't support "ldb_dn_add_child" on a "" parent DN
      s4:ldap_backend.c - more customisations to match Windows Server error behaviour on renames
      s4:torture/ldap/basic.c - add more error code/messages tests
      s4:instancetype LDB module - "instanceType" is single-valued - MS-ADTS
      s4:ldap_controls.c - remove encoding functions for private recalculate SD control
      ldb:pyldb.c - some cleanups and adequations also in "py_ldb_modify" and "py_ldb_rename"
      ldb:pyldb.c - introduce a "mem_ctx" also on "py_ldb_search"
      s4:ldap_backend.c - add some newlines to make logs easier to read
      s4:samldb LDB module - remove "samldb_set_defaultObjectCategory"
      s4:python LDB __init__.py - remove completely unused "erase_partitions" call
      ldb:ldb.h - add classifications to the control declarations
      ldb:controls - add the "TREE_DELETE" control for allowing subtree deletes
      s4:dsdb - add a new dsdb delete function which understands the tree delete control
      s4:subtree_delete LDB module - now do support tree delete operations
      s4:ldap_backend.c - move function "ldb_mod_req_with_controls" to a better place in the code
      s4:ldap_backend.c - now also the LDAP server supports controls on delete operations
      s4:ldap.py - test subtree deletes through a new testcase
      s4:libpolicy - Solaris compatibility fix
      s4:libpolicy - fix printf output specifiers to suppress warning
      s4:rpc_server/service_rpc.c - deactivate the 0-length struct
      s4:rpc_server/service_rpc.c - fix warnings on Solaris
      s4:lsa_lookup.c - fix type argument
      s4:registry RPC server - quite some build warnings on Solaris
      s4:samr RPC server - fix Solaris build warning
      s4:registry/rpc.c - fix Solaris warnings by casts
      s4:registry/regf.c - add some casts to suppress build warnings on Solaris
      s4:kdc/db-glue.c - remove unreachable code
      s4:dsdb_load_partition_usn - free the right memory context (tmp_ctx)
      s3/s4 - remove "talloc_tos()" from common code since s4 doesn't support it
      s4:password_hash LDB module - fix another problem regarding the lanman hash
      s4:samr RPC server - make use of LDB constants in macros
      s4:operational LDB module - fix a misleading comment
      s4:libnet_join.c - always use LDB constants
      s4:setup/provision.reg - raise version to Windows Server 2008 R2
      s4:upgradeprovision - fix include order for "ldb"
      s4:provision_users.ldif - change a group description to be correct
      s4:provision.ldif - this Win2003 revision level seems always to be "9" on Windows Server 2008 machines
      s4:provision.ldif - fix the number of available RIDs
      s4:auth/gensec/gensec_gssapi.c - reorder constructor
      Revert "s4:provision.ldif - fix the number of available RIDs"
      s4:lib/registry/ldb.c - cosmetic - wrap lines
      s4:lib/registry/ldb.c - cosmetic - fix comment
      s4:provision.py - fix comment regarding DNS entries
      s4:kdc/kpasswdd.c - remove unreachable code
      s4:kdc/kdc.c - add cast to suppress warnings on Solaris 10 cc
      s4:winbind/wb_samba3_protocol.c - add cast to suppress warnings on Solaris 10 cc
      s4:rpc_server/dcesrv_auth.c - remove unreachable code
      s4:rpc_server/drsuapi/drsutil.c - remove unreachable code
      s4:lsa/lsa_lookup.c - use a better type for the "rtype" of the wellknown SIDs
      s4:rpc_server/lsa/dcesrv_lsa.c - remove unreachable code
      s4:rpc_server/wkssvc/dcesrv_wkssvc.c - remove unreachable code
      s4:rpc_server/srvsvc/dcesrv_srvsvc.c - remove unreachable code
      s4:torture/rpc/samr.c - test_SetPassword_LastSet - fix "pwdLastSet" test
      s4:samr_password.c - add a function which sets the password through encrypted password hashes
      s4:OemChangePasswordUser2 - return "NT_STATUS_WRONG_PASSWORD" when we haven't activated the the lanman auth
      s4:dcesrv_samr_SetUserInfo - implement case 18 which allows to reset the user password
      s4:dcesrv_samr_SetUserInfo - implement password set level 21
      s4:dcesrv_samr_SetUserInfo - port the "SAMR_FIELD_LAST_PWD_CHANGE" check from s3 to s4
      s4:dcesrv_samr_SetUserInfo - deny operations when "fields_present" is 0
      s4:dcesrv_samr_SetUserInfo - implement right "pwdLastSet" behaviour
      s4:selftest - activate the lanman password changes
      s4:torture - SAMR password tests - activate support for password sets on level "18" and "21"
      s4:torture/rpc/samr.c - test_SetPassword_LastSet - introduce the delays also for s4
      s4:knownfail - "pwdLastSet" test does work now
      s4:lsa RPC server - Fix up "dcesrv_lsa_DeleteObject"
      s4:selftest - also "rpc.samr.users.privileges" does work now
      s4:dcesrv_drsuapi.c - fix a counter variable
      s4:acl LDB module - fix counter type
      s4:repl_meta_data LDB module - fix counter type
      s4:auth/sam.c - "authsam_expand_nested_groups" - use "dsdb_search_dn" where possible
      s4:auth/sam.c - "authsam_expand_nested_groups" - cosmetic/comments
      s4:auth/sam.c - "authsam_expand_nested_groups" - small performance improvement
      s4:lib/registry/ldb.c - change the "ldb_get_value" implementation to use the value cache and not an LDB lookup
      s4:lib/registry/ldb.c - retrieve the classname correctly in "ldb_get_subkey_by_id"
      s4:lib/registry/ldb.c - remove really useless "local_ctx"
      s4:lib/ldb/registry.c - handle the classname in the right way
      s4:lib/registry/ldb.c - fix memory handling in "ldb_open_key"
      s4:lib/registry/ldb.c - add a missing brace
      Revert "s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not available in the DN."
      Revert "s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend."
      ldb:ldb_dn - "ldb_dn_explode" - move the "dn->comp_num" initalisation upwards and use "LDB_FREE" for freeing "dn->components"
      s4:ldb_dn.c - make the code parts which free extended components consistent
      ldb:ldb_dn.c - "ldb_dn_set_extended_component" - free the linearized string when the components change
      s4:ldb - "ldb_dn_update_components" - fix free of invalid DN parts
      ldb:ldb_modules.c - "ldb_dso_load_symbol" - remove unneeded caste before "dlsym"
      ldb:ldb_map_outbound.c - "ldb_parse_tree_collect_attrs" - remove unneeded return value
      s4:dsdb/new_partition.c - remove the "ldb_next_request" call which we find also below the "if" block
      s4:smb_server/blob.c - remove unused code
      s4:smb_server/smb2/find.c - remove unused code
      s4:rpc_server/browser.c - remove unused code
      s4:ntp_signd/ntp_signd.c - add casts to suppress warnings on Solaris 10
      s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10
      s4:ntvfs/ipc/vfs_ipc.c - remove unused code
      s4:auth/session.c - suppress a warning when freeing "group_string"
      s4:lib/registry/ldb.c - "ldb_add_key" - fix talloc handling
      s4:lib/registry/ldb.c - use "ldb_path" rather than "ldap_path" as LDB key varibale identifiers
      s4:lib/registry/ldb.c - refactor "reg_path_to_ldb"
      s4:lib/registry/local.c - support recursive key generation
      s4:registry - on key add operations we have to handle with paths not always only a name
      s4:lib/registry/tests/registry.c - test recursive key generation
      s4:registry - move some common constraint checks to the "local" backend
      s4:lib/registry/ldb.c - free some "msg" objects earlier through explicit "talloc_free"s
      s4:dsdb/tests/python/passwords.py - add the right result codes for user password changes
      s4:dsdb/tests/passwords.py - set and reset the "minPwdAge" properly
      s4:blackbox/test_passwords.sh - perform also here the adaptions for "minPwdAge" != 0
      s4:pwsettings net utility - change also here the "minPwdAge" to be the real default
      s4:setup/provision_basedn_modify.ldif - set "minPwdAge" to the right value
      s4:schema_load.c - jump to "failed" on an error condition
      s4:schema_set.c - fix typo
      s4:dsdb_module_load_partition_usn - check for "res->count" equal/unequal to 1
      s4:dsdb_schema_set_attributes - remove unneeded filter criterias
      s4:schema_set.c - Fix a comment
      s4:schema_load LDB module - fix a segfault condition on schema refresh
      s4:urgent_replication.py test - remove unneeded "relax" control parameters
      s4:dsdb/tests/python/ldap_schema.py - remove a now useless "schemaUpdateNow" request
      s4:kinit blackbox test - set/reset also here the "minPwdAge"
      s4:torture/rpc/samlogon.c - provide a function which sets and afterwards resets the minimum password age
      s4:torture/rpc/samlogon.c - strip trailing whitespaces
      s4:libnet - add missing "talloc_free"s for "c" contexts on "recv" operations
      s4:wb_cmd_list_groups.c - indentation and comment fixes
      s4:wb_cmd_list_groups.c - don't crash when we don't get any group at all
      s4:subtree_delete LDB module - fix comments and add my copyright
      s4:subtree_rename LDB module - Cosmetic fixes
      samr.idl:UserInfo structures - fix some names according to MS-SAMR documentation
      s4:samr RPC server - "SetUserInfo" - allow some more informations to be set
      s4:winbind/wb_cmd_setpwent.c - fix a possible crash condition in the "winbind struct test"
      s4:include/smbldap.h - introduce a placeholder for "LDAPMessage" if we don't link against a LDAP library
      s4:dsdb - samdb_result_force_password_change - also when "pwdLastSet" is "-1" we shouldn't force a password change
      s4:SAMR rpc server - "QueryUserInfo" - send back the password expired flag on level 21
      s4:SAMR rpc server - "SetUserInfo" - fix the implementation of the expire flag
      s4:new_partition LDB module - fix an uninitalised variable warning
      s4:samdb.py - "setpassword" - performs password sets using the "unicodePwd" attribute
      s4:drsuapi RPC server - "result_site_name" - fix variable denomination
      s4:acl LDB module - move a "mem_ctx" creation to the place where it is actually checked
      s4:acl LDB module - password attributes - check also the "dBCSPwd" attribute
      ldb:common/ldb_dn.c - "ldb_dn_get_parent" - no need to manipulate the real DN

Matthieu Patou (127):
      s4: add python bindings for wrap_(s|g)etxattr
      s4: Create unit tests for python "samba.xattr" module
      s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP
      s4: Make unixid optional
      s4: Set acls correctly on all sysvol and scripts shares
      s4: ntvfs, create push_xattr_blob_tdb_raw and pull_xattr_blob_tdb_raw that do not depend on pvfs objects
      s4: update setntacl and getntacl to select the adaquate backend (fs/tdb) for storing xattr
      s4-python: add more unit tests for xattr manipulation in python
      s4-python: add unit test for ntacls manipulation in python
      s4-tests: register new unit tests
      provision: introduce use-xattr parameter for defining where to store attributes
      provision: use message and do not display warning if the user choosed delibarately posix:eadb
      s4: allow python code to dump NTACL object as well
      s4: utils recreate in python setntacl and getntacl
      Add a comment to tdb_wrap to explain why it should be used instead of directly using tdb
      upgradeprovision: never use xattr it's pointless in this usecase
      Revert "s4:upgradeprovision - fix up the script regarding linked attributes"
      upgradeprovision: improve info messages
      upgradeprovision: reformat + add groupType as possibly overwritten
      upgradeprovision: mark rIDAvailablePool never upgraded
      upgradeprovision: forbid running upgradeprovision when there is more than 1 DC
      s4-python: add some helper for converting ldb_flag to text
      selftest-s4: set the posix:eadb at the global level
      provision: Fix an error with eadb when using not default install dir and running as a non root user
      python-s4: use secrets.ldb instead of sam.ldb for reading domain SID
      provision: Use short name for assignee of ACE (BA, SA, CO, ...)
      dsdb: Add a more explicit error message for constructed attributes
      python: ntacls, fix a leftover that is not in the try/except branch
      s4: Winbind allow to behave more correctly when we have more than a few users
      upgradeprovision: split the big script to put reusable functions appart
      upgradeprovision: code cleanup
      upgrade provision: change the meaning of handle_security_desc to be similar to handle_special_case
      upgradeprovision: Allow script to be called with pydoc
      upgradeprovision: Move to pythondoc format
      nsswitch: libpam remove depedance on locale.h use directly LOCALEDIR
      s3: Allow pam_winbind.c to build without localedir.c
      s3: Move source3/iniparser to lib/iniparser to allow sharing between s3/s4
      s3: Fix build file due to file move. Use the new path of iniparser
      s4-build: fix SMB_LIBRARY and change its name so it didn't collide with s3 one
      s4:winbind: implement calls for allowing getent groups
      s4:winbind Implement logic for getgroups to work
      s4:winbind: Fix a misplaced returned info
      s4:winbind: stub implementation of WINBINDD_PAM_LOGOFF
      s4:unittest Fix unittest to reflect that wbinfo -r no longer fail
      s4: Modify auth/config.m4 to move pam tests to nsswitch.m4 so that we tests things in one place
      s4: create ../lib/iniparser_build/config.m4
      s4: allow pam_winbind.so to be build on samba4
      provision: make gpo related function more reusable for upgradeprovision
      s4: allow upgrade provision to fix acl and missing dir on GPO dirs
      s4 upgradeprovision: add information about upgrade in oEMInformation to keep a better trace of different updates
      Add partial information in whatsnew for the next release
      s4: complete the build instruction because the problem with the idl_full cames very often
      s4 provision: Remove hard coded ACL for GPO objects
      s4: Fix python binding for drsblobs
      s4: Add python binding to waf so that the drsblobs.so is also built in waf
      s4 python: Add a function to get the oid of an attribute when the attid is known
      s4 python: make the function dsdb_get_oid_from_attid reachable from a samDB object
      s4 python: add a unit test for function dsdb_get_oid_from_attid
      s4 dns: Allow to specify static grant entries to be added to the dynamicaly generated named.conf.update
      pidl: Fix the generation of py helper for 64 bit integer
      s4 python: fix glues functions manipulating NTTIME
      s4: Fix python binding for drsblobs
      s4: Do not display by default the message Failed to send DsReplicaSync is other host is just unreachable
      librpc/idl: fix errors and improve idl in dfsblobs
      s4 torture test: Adapt ndr-dfsblobs torture test to new idl
      s4 torture: Add tests for dfs referrals handling in SMB/trans2 requests
      s4:smb_server: fix trailling whitespace in trans2.c
      s4:smb_server: Implement GET_DFS_REFERRAL for domain referral requests
      s4:smb_server: add dfs smbtorture to selftests
      s3: Allow previous password to be stored and use it to check tickets
      s4: Remove an uselessly exposed control
      s4:ldb python bindings - implement comparison on Python LDB Message objects
      s4 python: add more unit tests to verify the compare tests
      unittest: Change the name of the base ldb test so that it can be easily called separatly
      s4 provision: Add information about provisioned usn range in sam.ldb
      s4 Add functions related to ldb manipulation when doing upgrade
      s4 upgrade provision: Fix style in gen_dn_index
      s4 upgrade provision: Refactor code to do all the modification within 1 transaction
      s4 upgradeprovision: fix style
      s4 upgradeprovision: Inform about new dns dynamic update if the provision didn't have it
      s4 upgradeprovision: Reformat attributes lists and reformat parser
      s4 upgradeprovision: Use replPropertyMetaData for better guess
      s4 upgradeprovision: Fix style
      s4 upgradeprovision: move some functions to upgradehelpers for unit tests
      s4 python: Add unit tests for upgradeprovision related stuff
      s4 upgradeprovision: Add documentation on the update process
      s4: Add comments about setup_secrets
      s4 python: Update unit tests related to create secrets
      s4 upgradeprovision: Move functions to helpers and improve code
      s4 upgradeprovision: Restyle imports
      s4 upgradeprovision: additional restyling
      ldb: add a new control bypassioperationnal
      s4: Using control bypassoperational allow the logic of this module to be bypassed for some given attributes
      s4 upgradeprovision: Add function for searching stored constructed attributes
      s4 unittests: add unit tests for upgradehelpers
      s4 upgradeprovision: add an option to force the rebuilding of FS ACLs on sysvols share
      s4 upgradeprovision: Emit message instead of crashing when not able to set acl
      s4 upgradeprovision: Check that the policy for DC is present if not warn the user
      s4 upgradeprovision: Make grouped commit / rollback more resistant to unexpected problems
      s4 upgradeprovision: fix the logging stuff so that it actually log
      pidl: Finish to fix the python generated code for 64bit integers
      ldb: Fix a wrong changetype in unit test
      s4 python: Add unit tests related to PyLong/PyInt handling
      s4 upgradeprovision: For SID > 1000 do not copy them, let the system regenerated a new one
      s4 net: Add spn module to list/add/remove spn on objects
      s4 unittests: remove the provision directory before (re)generating
      s4 provision: use correct GUID for default policies
      s4 provision: move update_machine_account_password to helpers
      s4: Add a simple script to change dc password
      s4: Unit test update_machine_account_password through kinit
      ldb: allow ldb_sequence_number to be called in python
      s4 dsdb: create a new control: changereplmetadata
      s4 dsdb: Use the changereplmetadata control
      s4 python: Add functions to samdb to manipulate version of replPropertyMetaData attribute
      s4 upgradeprovision: introduce a new function to update the field use for calculating msds-keyversionnumber
      s4: Add unit test for increment_calculated_keyversion_number
      s4 upgradeprovision: fix whitespaces
      s4 upgradeprovision: add function to backup the provision before updating
      s4 upgradeprovision: do not copy RID Set it's automaticaly created by the RID manager
      s4 upgradeprovision: Synchronize the calculated keyversionnumber with the one previously stored
      s4 ldb modules: relax some tests about attributes that should not be here
      s4 upgradeprovision: Adapt the list of attribute modified
      s4: create a simple version of ktpass
      s4 unittests: add blackblox test for ktpass
      s4-waf: add the missing bits for builing nss_winbind and pam_winbind
      s4 nss_switch: fix build problem on computer without the iniparser
      s4 pam_winbind: don't build if pam header are not installed

Michael Adam (108):
      s3:auth: add comment to nulling out stolen sampass
      docs: fix xml tag in the pdbedit manpage
      s3:auth: fix account unlock regression introduced with fix for bug #4347
      torture: add new test RPC-SAMR-PASSWORDS-LOCKOUT
      s4:selftest: add the samr-passwords-lockout test to knownfail
      s4:rpc-server:samr: fix setting of lockout duration < lockout window
      s4:torture: refactor setting account flags out into test_SetUserInfo_acct_flags()
      s4:torture: refactor setting of domain inf out into test_SetDomainInfo()
      s4:torture: create new test_SetDomainInfo_ntstatus()
      s4:torture: refactor querying of domain info out into test_QueryDomainInfo2_level()
      s3:dbwrap_ctdb: start rewrite of transactions using the global lock (g_lock)
      build: Add a configure check for CTDB_CONTROL_TRANS3_COMMIT.
      s3:dbwrap_ctdb: update (C)
      s3:dbwrap_ctdb: change db_ctdb_transaction_store() to return NTSTATUS.
      s3:dbwrap_ctdb: maintain a database sequence number that bumps in transactions
      s3:build: remove checks for deprecated ctdb controls.
      s3:dbwrap_ctdb: fix db_ctdb_fetch_db_seqnum_from_db() when NT_STATUS_NOT_FOUND.
      s3:dbwrap_ctdb: fix two "may be used uninitialized" warnings
      s3:dbwrap_ctdb: fix an uninitialized variable.
      s3:dbwrap_ctdb: fix logic error in pull_newest_from_marshall_buffer().
      s3:dbwrap_ctdb: fix brown paperbag bug in ctdb_transaction_commit.
      s3:dbwrap_ctdb: exit early when nothing has been written in transaction_commit.
      s3:dbwrap_ctdb: fix reading/storing of special key __db_sequence_number__
      s3:g_lock: remove an unreached code path.
      s3:ctdb_conn: add ctdbd_conn_get_fd() to get the fd out of the ctdb connection
      s3:g_lock: remove a nested event loop, replacing the inner loop by select
      s3:make "net conf addshare" atomic by wrapping all writes in one transaction
      s3:registry: eliminate race condition in creating/scanning sorted subkeys
      packaging(RHEL-CTDB): adapt configure.rpm to match the spec-file configure call
      nss_wrapper: fix segfault in print_group() in the testsuite
      s4:move the sddl code down to the top level
      libcli/security: fix sddl.c to be able to build it from source3
      s3: build sddl.c in samba3
      s3:smbcacls: add switch "--sddl" to output acls as sddl encoded strings
      s3:net: refactor getting of secdesc out of net_registry_getsd()
      s3:net: add new subcommand "net registry getsd_sddl" to print secdesc in sddl format
      s3:net: add i18n macro _() to one message
      s3:net: fix some i18n messages in net_registry_getsd_internal().
      s3:net: add a command "net registry setsd_sdd"
      s3:release-scripts: fix create-tarball to treat vendor patch level correctly
      s3:build: Fix automatic building of vfs_tsmsm if gpfs and dmapi are present.
      s3:smbcacls: also honour the "--sddl" flag when setting ACLs.
      s3:registry-legacy: use talloc_stackframe() instead of NULL in regkey_open_internal()
      s3:configure: fix a message
      s3:winbind:idmap_tdb: don't check ranges when an invalid entry was found.
      s3:winbind:idmap_tdb2_set_mapping: untangle assignment from check
      s3-waf: fix linking of swat by adding cap as dependency
      s3-waf: fix linking of eventlogadm by adding cap as dependency
      s4:torture:winreg: improve error messages in test_QueryValue_full
      s4:torture:winreg: improve error messages in test_HKLM_wellknown
      s3:fix configure after change "add Werror_FLAGS for IBM's xlc"
      s3:registry: add C to reg_cachehook, confessing considerable changes in 2008
      s3:registry: protect registry.h from multiple inclusion
      s3:registry: extract the reg_cachehook prototypes into their own header.
      s3:registry: extract the reg_util_legacy prototypes into their own header.
      s3:registry: remove superfluous comments from registry.h
      s3:registry: extract the reg_util prototypes into their own header.
      s3:registry: fix data_p arg of regval_compose to be uint8 * instead of char *
      s3:registry: fix regval_ctr_addvalue() to take data as uint8 *, not char *.
      s3:registry: adapt callers of regval_ctr_addvalue to uint8 * instead of char *
      s3:registry: extract the reg_backend_db prototypes into their own header.
      s3:registry: extraxt the reg_dispatcher prototypes into their own header.
      s3:registry: extract reg_perfcount prototypes into header of their own.
      s3:registry: extract reg_eventlog prototypes to header of their own
      s3:registry: move registry_create_admin_token() to new reg_util_token.c
      s3:registry: move prototype registry_create_admin_token() to new header reg_util_token.h
      s3:registry: rename reg_util.{c,h} to reg_util_internal.{c,h}
      s3:registry: rename lib/util_reg_api.c to registry/reg_util_marshalling.c
      s3:registry: extract registry_pull/push_value prototypes into own header
      s3:registry: move definition of registry_hook to reg_init_full.c - it's only user
      s3:registry:reg_objects: add regval_ctr_init()
      s3:registry:reg_objects: add regval_ctr_get_seqnum()
      s3:registry:reg_objects: add regval_ctr_set_seqnum()
      s3:registry: use regval_ctr/blob accessor functions in reg_api.c
      s3:registry: user regval_ctr/blob accessor functions in reg_backend_db.c
      s3:registry: use regval_ctr/blob accessor functoin in reg_eventlog.c
      s3:libads:use regval_ctr/blob accessor functions in ldap_printer.c
      s3:services_db: use regval_ctr_init() instead of direct allocation
      s3:srv_ntsvcs: use regval_ctr/blob accessor functions
      s3:nt_printing: use regval_ctr_init().
      s3:net rpc printer: fix use of a possibly uninitialized variable
      s3:net_rpc_printer: use regval_blob/ctr accessor functions
      s3:rpcclient:spoolss: use regval_ctr/blob accessor functions.
      s3:profiles: use regval_ctr_init() instead of direct allocation
      s3:net rpc registry: use regval_ctr_init() instead of direct allocation
      s3:registry: hide definition of regval_ctr and regval_blob in reg_objects.c
      s3:registry: move non-reg_objects definitions from reg_objects.h to registry.h
      s3:registry: move reg_objects.h to registry/ and use it only where needed
      s3:registry: add comment header block to registry.h
      s3:registry:reg_objects: Remove use of uint{8,16,32} in favour of C99 types
      s3:registry: add C for substantial changes to reg_objects
      s3:fix the waf build after registry changes.
      s3: remove prototype of non-existsing function idmap_tdb_tdb_close().
      s3: remove unused prototype for lp_idmap_domains().
      s3:pdb_ldap: fix bug 7505 - init_sam_from_ldap stores group in sid2uid cache
      s3:idmap_ldap: remove unreached code (and explicit error return code)
      s3:fix an outdated comment.
      s3:net rpc registry: make getsd succeed when key sd only gives access to SD not key contents
      s3:registry: use normalize_reg_path() in regdb_get_secdesc()
      s3:registry: use normalize_reg_path() in regdb_set_secdesc()
      s3:registry: remove unused function normalize_dbkey()
      s3:registry: fix some debug messages in regdb_ini()
      s3:registry: improve logic of upgrade code in regdb_init()
      s3:net [rpc] registry: be as user-friendly as possible wrt to the normalization change
      s3:registry: rename regdb_upgrade_to_version_2() -> regdb_upgrade_v1_to_v2()
      s3:registry: add a function regdb_store_regdb_version()
      s3:registry: use regdb_store_regdb_version() in regdb_upgrade_v1_to_v2()
      s3:registry: use regdb_store_regdb_version() in regdb_init().

Michael Karcher (1):
      Fix bug #7269 - Job management commands don't work for CUPS queues.

Michael Wood (1):
      s4 upgradeprovision: Try to support older Pythons.

Nadezhda Ivanova (36):
      Adapted acl module to skip checks if as_system control is provided.
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Merge branch 'master' of git://git.samba.org/samba
      Fixed a problem with incorrect default SD owner/group.
      Implemented net fsmo command for transferring fsmo roles
      Fixed a bug caused by a typo. Infrastructure role didn't work.
      Refactored ACL python tests
      Added a check for permissions to modify the RDN attribute on rename.
      Fixed a bug in acl tests - python error when we create user/group/ou with a descriptor.
      A helper function to get the Infrastructure DN.
      Moved access_check_on_dn from acl module as an utility.
      Fixed ACL module to use dsdb_module_* API.
      Split the dsdb_access_check_on_dn.
      Added a net acl ds command for modification of ACLs on directory objects
      Fixed a problem with provision missing the default_dir/etc directory.
      A bit of refactoring in the SD creation code.
      s4:Added a test to make sure we ignore ACEs with ID flag set.
      s4:Replaced dsdb_get_dom_sid_from_ldb_message() with samdb_result_dom_sid()
      s4:Added a test for correct CO expansion in SD creation.
      Removed more excess looping and fixed problem with incorrect IO flag handling.
      Added a function to check if an attribute can belong to a filtered replica.
      Added a couple of systemFlags, needed for determining filtered attributes.
      Added guids for the validated writes.
      Adjusted ACL tests to use encripted connection.
      s4:Descriptor tests clean-up.
      Implementation of self membership validated right.
      Fixed incorrect use of cn instead of lDAPDisplayName
      Tests for user-change-password and force-password-change access rights
      s4-dsdb: Implementation of User-Change-Password and User-Force-Password-Change
      Changed passwords.py to use the correct account as acl checks now pass.
      Added a test to prove by default users can change each other's pass if the old is known
      s4: Reorganized dsHeuristics reset so the code can be reused
      Fixed system_session_anon to actually make an anonymous session
      s4: Added acl search tests for anonymous connection.

Olaf Flebbe (3):
      work around AIX6.1 name space pollution rename mod_name to module_name
      configure.in prevent generation of file "shlib.so"
      check if LD_AS_NEEDED breaks linking with libreadline fixes #7209

Oliver Liebel (3):
      Fixed MMR-URL-Split and changed RID-Range OpenLDAP ITS6394
      Fixed OL-MMR make test
      Fixed --ol-mmr-url helpline

Olivier Sessink (3):
      s3: Add the "scannedonly" vfs virus scanner interface module
      Part 4 of bug #7028 - include scannedonly VFS module
      s3-docs: Add man page for vfs_scannedonly.

Peter Watkins (1):
      s3: Fix initgroups return check

Ricardo Jorge (1):
      Fix SharesContainer.__len__.

Roel van Meer (2):
      Fix one of the valgrind warnings from bug #6814 - Fixes for problems reported by valgrind
      Fix bug #7448 - smbd crash when sambaLMPassword and sambaNTPassword entries missing from ldap.

Rusty Russell (28):
      tdb: give a name to the invalid recovery area constant (0)
      tdb: fix recovery reuse after crash
      tdb: cleanup: split brlock and brunlock methods.
      tdb: make _tdb_transaction_cancel static.
      tdb: cleanup: rename GLOBAL_LOCK to OPEN_LOCK.
      tdb: cleanup: rename global_lock to allrecord_lock.
      tdb: cleanup: tdb_nest_lock/tdb_nest_unlock
      tdb: don't suppress the transaction lock because of the allrecord lock.
      tdb: cleanup: tdb_have_extra_locks() helper
      tdb: cleanup: tdb_release_extra_locks() helper
      tdb: cleanup: find_nestlock() helper.
      tdb: use tdb_nest_lock() for transaction lock.
      tdb: use tdb_nest_lock() for open lock.
      tdb: use tdb_nest_lock() for active lock.
      tdb: use tdb_nest_lock() for seqnum lock.
      tdb: remove num_locks
      tdb: cleanup: always grab allrecord lock to infinity.
      tdb: suppress record write locks when allrecord lock is taken.
      tdb: tdb_allrecord_lock/tdb_allrecord_unlock/tdb_allrecord_upgrade
      tdb: cleanup: remove ltype argument from _tdb_transaction_cancel.
      tdb: rename tdb_release_extra_locks() to tdb_release_transaction_locks()
      tdb: remove lock ops
      tdb: don't truncate tdb on recovery
      tdb: add -k option to tdbtorture
      patch tdb-refactor-tdb_lock-and-tdb_lock_nonblock.patch
      tdb: handle processes dying during transaction commit.
      tdb: fix short write logic in tdb_new_database
      Since idtree assigns sequentially, it rarely reaches high numbers.

SASAJIMA Toshihiro (1):
      Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV)

SATOH Fumiyasu (1):
      vfs_netatalk: Segfault if hide files or veto files has no ".AppleDouble"

Simo Sorce (254):
      Fix comment/debug messages
      Strip trailing spaces
      s4:kdc Simplify header files
      s4:PAC Streamline pac-glue
      s4:PAC Streamline pac-glue step 2
      s4:PAC make common functions public
      s4:windc move windc plugin in its own file
      cleanup: remove trailing spaces and tabs
      s4:kdc Use better db context structure
      s4:kdc Use a clearer name for the samba kdc entry
      s4:kdc move db functions in their own file
      s4:kdc Fill in more data fields
      s4:kdc remove dead code and comments
      s4:ldb add support for permissive modify control
      s4:ldb Fix check made conditional by mistake
      s4:ldb quiet down rootdse control registration
      s4:kdc Fix netbios name retrieval
      s4:kdc Streamline client access verification call
      s4:kdc streamline context initialization
      tdb: raise version to 1.2.1
      talloc: Fix abi checks and ifdefs
      talloc: Fix abi checks in release script
      release-scripts: parametrize scripts
      Introduce lp_safe_widelinks()
      s4:kdc Fix double free and uninitialized memory.
      s4:kdc Fill in created_by principal field
      s3:rpc streamline memory handling
      readability reformatting
      remove trailing tabs and spaces
      s4:lsa open trusted domain also with dns name
      s4:netlogon enhance DsrEnumerateDomainTrusts
      ldb:web Fix typo
      s4:netlogon fix segfault
      s4:netlogon GetTrustedDomainInformation
      s3 Fix the build
      s3 move the sitename cache in its own file
      s3:schannel more readable check logic
      s4:schannel more readable check logic
      schannel: merge header files
      s3:schannel fix memory hierarchy
      s3:schannel streamline interface
      schannel_tdb: make code compilable in both trees
      s4:schannel merge code with s3
      s4:cleanup remove unused schannel ldb code
      s4:netlogon remove wrong ZERO_STRUCT of output
      Revert "s4-smb: Migrate named_pipe_server to tsocket."
      s4:lsa cleanup trailing spaces and tabs
      s4:lsa avoid confusing ourselves over sam_ldb
      s4:lsa use the correct way to store a domain sid
      idl:lsa change string type
      s4:kdc make function static
      s4:kdc add mit plugin code
      s3:groupmap revert to tdb storage
      s3:ads fix dn parsing name was always null
      s3:tldap add own filter parsing
      s4:ldb fix escape parsing
      Fix typo
      Fix typo and convert spaces to tabs
      s4:idl change level to type in lsa_ForestTrustRecord.
      s4:idl add lsaRSetForestTrustInformation
      s4:torture-ndr add lsarSetForestTrustInformation ndr test
      s4:lsa Abstract crypto (un)wrapping in separate functions
      s4:lsa move code to add trusted domain user into its own function
      s4:lsa Functions to set Domain Trust Information
      idl:drsblobs add code to interpret msDS-TrustForestTrustInfo
      idl: fix forest trust information idl
      idl: fix comment and convert whitespaces to tabs
      tdb: update exports and signatures files
      s4:lsa implement lsaRSetForestTrustInformation
      s3-spoolss: Added winreg helper functions
      s3-spoolss: Add date and version winreg helpers.
      s3-spoolss: Move info_ctr conversion to a public helper.
      s3-spoolss: Added a winreg_add_driver function.
      s3-spoolss: Added a winreg_get_driver function.
      s3-spoolss: Added a winreg_del_driver function.
      s3-spoolss: Added a winreg_get_driver_list function.
      s3-smbd: group print relate data in own structure
      smbd: move printfile_offset() within write_file()
      s3-spoolss: Remove duplicate macro.
      s3-spoolss: Fixed winreg_printer_query_XXX.
      s3-spoolss: Make spoolss_Time_to_time_t public.
      Move standard printcap parsing to print_standard.c
      Make pcap headers private
      s3-spoolss: Removed the Phantom DeviceMode.
      tsocket: Improve the language in some parts of the guide.
      torture: fix typos
      named_pipe_auth: implement tstream_npa_accept_existing_send/recv
      s4:smbd: Add tstream to the stream_connection structure
      s4:smbd: Use tstream_npa_accept_existing to accept named pipe connections
      s3-rpc_server: Created a per connection spoolss pipe.
      s3-lanman: Migrated to rpc_connect_spoolss_pipe().
      s3:auth: add function to convert samu to netr_SamInfo3
      s3:auth add function to copy a netr_SamInfo3 structure
      s3:auth use info3 in auth_serversupplied_info
      s3:auth Free sampass as soon as we have server_info
      s3:auth add function to convert wbcAuthUserInfo to netr_SamInfo3
      Fix Out of memory checks
      s3:auth remove login_server from server info
      s3:auth Add comment to clarify usage of session keys.
      s3:passdb Fix memory leak
      s3:smbd Use the right num_sids
      s3:auth fix info3 duplication function
      s3:auth make it easier to trace auth modules
      s3:smbd make yp cache local.
      s3:smbd user_in_network() doesn't need sconn anymore
      s3:smbd user_in_list() doesn't need sconn anymore
      s3:smbd user_ok doesn't need sconn anymore
      s3:smbd map_username() doesn't need sconn anymore
      ldb: Remove unexisting and mistyped function from header
      Revert "ldb: Remove Samba-specific symbols."
      s3:auth make sure we set the right username
      s3:auth check the user is valid first
      s3:auth set the resolved user sid in the fake sam account
      s3:auth handle unix domain sids in samu
      s3:auth create nt token from info3 directly
      s3:auth remove unused structure member
      s3:passdb Export function to calculate the proper primary group sid
      s3:auth return the full passwd struct from check_account
      s3:auth make sure the primary group sid is usable
      s3:rpc fix potential out of bound memory access
      s3:rpc handles are used by all pipes, use better name
      s3:rpc make num_pipe_handles get an actual pipe as argument
      s3:smbd add utility function to check if there are open pipes
      s3:cleanup remove trailing spaces
      s3:cleaunp reformatting for readability
      s3:lib make server contexts generic
      s3:winbindd use common server context functions
      s3:rpc improve handles memory hierarchy and use better name.
      s3:auth fix samu->info3 conversion
      s3:auth Fix switch statement referencing a uninitialized variable
      s3:winbindd_samr Do not use static contexts
      s3:rpc user idl define dcerpc_ctx_list instead of custom RPC_CONTEXT
      s3:dcerpc Add prs_parse_dcerpc_bind
      s3:dcerpc Use prs_parse_dcerpc_bind
      s3:dcerpc Remove unused structure and functions
      s3-dcerpc: use dcerpc_push_ncacn_packet() in create_rpc_bind_auth3()
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in cli_pipe_verify_schannel()
      s3-dcerpc: use dcerpc_push_dcerpc_auth() in add_ntlmssp_auth_footer()
      s3-dcerpc: use dcerpc_push_dcerpc_auth in add_schannel_auth_footer()
      s3-dcerpc: use dcerpc_pull_dcerpc_auth() in rpc_finish_spnego_ntlmssp_bind_send()
      s3-dcerpc: make dceprc_push_dcerpc_auth public
      s3-dcerpc: make dcerpc_pull_dcerpc_auth() public
      s3-dcerpc: Use dcerpc_auth in api_pipe_bind_req()
      s3-dcerpc: Use dcerpc_pull_dcerpc_auth in api_pipe_bind_auth3()
      s3-dcerpc: Fix miscalculation of buffer start address
      s3-dceprc: Fix auth_length in auth3 response
      s3-dcerpc: Fix ntlmssp sign/seal.
      s3-dcerpc: Remove unused prototype
      s3-dcerpc: Use dcerpc_set_frag_length()
      s3-dcerpc: Remove unused headers
      s3-dcerpc delay rpc header unmarshalling
      sr-dcerpc: add dcerpc_push_ncacn_packet_header()
      s3-dcerpc: use dcerpc_push_ncacn_packet_header() in create_next_pdu_ntlmssp()
      s3-dcerpc: Use dcerpc_push_ncacn_packet_header() in create_next_pdu_schannel()
      s3-dcerpc: use dceprc_push_ncacn_packet_header in create_next_pdu_noauth()
      s3-dceprc use a DATA_BLOB to hold the curren pdu in pipes_struct
      s3-dceprc: Store opnum in its own variable
      dcerpc: move dcerpc_pull_auth_trailer into a the common dcerpc_util.c file
      s3-dcerpc: Use dcerpc_pull_ncacn_packet() to unmarshall dceprc requests
      s3-dcerpc: Remove unused functions
      s3-dcerpc: Remove unused members
      s3-dceprc: Add debug messages
      s3-dcerpc: pass the packet to setup_bind_nack()
      s3-dcerpc: fix dcerpc_push_ncacn_packet, pass arg by address
      s3-dcerpc: Rearrange api_pipe_bind_req() to do checks before allocating memory
      s3-dcerpc: Use a DATA_BLOB in bind processing and avoid one mem copy
      s3-dceprc: Use dcerpc_push_ncacn_packet() in api_pipe_bind_req()
      s3-dcerpc: Use dcerpc_push_dcerpc_auth() for spnego auth continuations.
      s3-dcerpc: Use dcerpc_push_ncacn_packet() in api_pipe_alter_context()
      s3-dcerpc: Remove unused functions and headers
      s3-dcerpc: Break memory hierarchy for shared structure
      s3-dcerpc: Break memory hierarchy for shared structure
      s3-dcerpc: Delay parsing rpc header in client code
      s3-dcerpc: Pull the whole packet at once instead of fetching just the header
      s3-dcerpc: Do not reparse the header
      s3-dcerpc: Remove unused function
      s3-dcerpc: Do not parse the packet twice.
      s3-dcerpc: Stop using hand marshalling in rpc_finish_auth3_bind_send()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_ntlmssp()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_schannel()
      s3-dcerpc: Stop using hand marshalling in create_next_pdu_noauth()
      s3-dcerpc: Remove unused functions and headers
      s3-dcerpc: Convert rdata from prs_struct to a simple DATA_BLOB
      s3-dcerpc: Convert frag from prs_struct to a simple DATA_BLOB
      s3-dcerpc: consolidate respones packet creation code
      s3-dcerpc: Refactor code and stop using ncacn_packet_header
      dcerpc: remove ncacn_packet_header and related functions
      s3-dcerpc: Padding is never done on a DCERPC_PKT_BIND_ACK packet.
      s3-dcerpc: Move common helpers into a common file
      Reformat and cleanup
      s3-dceprc: Use IDL defined constants for length calculations
      s3-dcerpc: Read a pdu in 2 steps, header first the payload
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for incoming fragments
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for reply_pdu
      s3-dcerpc: Avoid unnecessary memory allocation for dcerpc_ctx_list
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for rpc_out
      s3-dcerpc: Use DATA_BLOB instead of prs_struct for req_data
      s3-dcerpc: Use DATA_BLOB for pipes_struct input data
      s3-misc: Move smb_io_time() to regfio.c
      s3-dcerpc: Use a local function to dump pdu regions
      s3-parse_prs: Remove unuesd functions
      Move the remnants of rpc_parse code under registry/
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-dcerpc: Fix ability to receive Big Endian PDUs
      s3-dcerpc: Move common cli/srv functions into a common file
      s3-dcerpc: Move mere processing functions from srv_pipe_hnd.c to srv_pipe.c
      s3-dcerpc: Fix build and remove unneeded headers
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-ntlmssp: Remove ntlmssp_end and let the talloc hierarchy handle it.
      s3-auth: Cleanup and readability fixes
      s3-auth: Simplify how we free the auth_context
      s3-auth: auth_make ntlmssp_state the parent context
      s3-auth: Use talloc hierarchies to properly free auth_ntlmssp_state contexts
      Merge branch 'master' of ssh://git.samba.org/data/git/samba
      s3-auth: Remove unused variable.
      s3-auth: Refactor and rename auth_ntlmssp_server_info()
      s3-auth: Move auth_ntlmssp wrappers in their own file
      s3-auth: Add auth_ntlmssp wrapper for client side
      s3-dcerpc: Unifiy cli_pipe_auth_data and pipe_auth_data
      dcerpc: Clarify what the arguments of dcerpc_pull_auth_trailer() actually represent.
      misc: cleanup cli_krb5_get_ticket()
      misc: cleanup get_krb5_smb_session_key()
      s3-libsmb: Use data_blob_talloc to get krb5 ticket and session keys
      s3-dcerpc: Properly initialize output buffers on nak/fault
      s3-dcerpc: Fix potential memleak
      cleaup: Reformat cli_get_session_key()
      s3-rpc_server: Cleanup the way we free pipe auth data
      s3-spoolss: Migrated NT_DEVICEMODE to spoolss_DeviceMode.
      s3-spoolss: Migrated driver functions to winreg.
      s3-spoolss: Use spoolss_PrinterInfo2 for job info.
      s3-spoolss: Use spoolss_PrinterInfo2 in construct_printer_driver_info_level.
      s3-spoolss: Removed construct_dev_mode() function.
      s3-spoolss: Convert do_drv_upgrade_printer() to winreg functions.
      s3-spoolss: Use spoolss_PrinterInfo2 in notify code.
      s3-printing: Convert print_time_access_check.
      s3-printing: Convert print_driver_in_use.
      s3-printing: Converted printer publishing functions.
      s3-spoolss: Get rid of get_server_name.
      s3-spoolss: Use winreg_delete_printer_key to delete printers.
      s3-spoolss: Removed unused set_printer_dataex().
      s3-smbd: Added code to print via spoolss.
      s3-printing: Made print_job_start more robust.
      s3-printing: Handled case when smbd spools a file on behalf of spoolss.
      s3-smbd: Migrated to new spoolss functions for printing.
      s3-printing: Removed unused printfsp.c.
      s3-spoolss: Use WERROR for print_job_delete.
      s3-printing: Moved printing.c headers to include/printing.h.
      s3-smbd: Use the right check to test if we can print.
      s3-printing: Removed unused function print_job_fd().
      s3-smbd: Convert reply_printqueue to use spoolss.
      s3-spoolss: Fixed a possible segfault in winreg_get_printer.
      s3-spoolss: Avoid segfault, check drivername is actually not NULL.

Stefan Metzmacher (598):
      s4:ldb: be more strict in parsing ldb time strings
      s4:dsdb/common: let samdb_msg_add_uint64() call samdb_msg_add_int64()
      s4:dsdb/common: let samdb_msg_add_uint() call samdb_msg_add_int()
      s4:ldb_msg: first try to decode integers as signed and then fallback to unsigned
      s4:dsdb/common: fix major bug in lsa_BinaryString to ldb_val conversation.
      s4:dsdb/repl: change dreplsrv_op_notify_send/recv() to tevent_req
      s4:dsdb/repl: reorder dreplsrv_op_notify* functions
      s4:ldb/tests: do a "schemaUpdateNow" after creating a new attribute in ldap_schema.py
      s4:dsdb/schema_load: add a TODO about schema reloading
      s4:dsdb/resolve_oids: also resolve oid in search attribute list
      s4:dsdb/schema: add dsdb_syntax_DN_STRING_* wrappers
      s4:dsdb/schema: add inftrastructure for dsdb_validate_ldb()
      s4:dsdb: add validate_update module
      s4:dsdb/schema: add dsdb_syntax_BOOL_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_INT32_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_INT64_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_NTTIME_UTC_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_NTTIME_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DATA_BLOB_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_UNICODE_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_BINARY_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_DN_STRING_validate_ldb()
      s4:dsdb/schema: add dsdb_syntax_OID_validate_ldb()
      s4:dsdb: use validate_update module
      s3:smbldap: add smbldap_talloc_first_attribute()
      s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.
      s4:smbtorture: add BASE-BENCH-HOLDOPEN
      s4:winsrepl.idl: add random interface uuid
      s4:libcli: remove unneeded talloc_reference() usage
      s4:auth_sam: avoid usage of data_blob_talloc_reference() and copy the session keys
      lib/util: remove data_blob_talloc_reference()
      security.idl: add wellknown TrustedInstaller SID
      librpc: rerun 'make idl'
      libcli/nbt: fix ndr_pull/push_wrepl_nbt_name()
      libcli/nbt: fix off-by-one bug in ndr_pull_wrepl_nbt_name()
      libcli/nbt: fix ndr_push_nbt_string() string labels with a length of 63 (0x3F) are allowed
      s4:wrepl_server: truncate the scope of a netbios name to 237 bytes as Windows 2008 does
      s4:winsserver: reject name registrations with a scope length > 237
      s4:NBT-WINSREPLICATION: use an array of nbt_names to loop over different names
      s4:NBT-WINSREPLICATION: fix compiler warnings
      s4:NBT-WINSREPLICATION: test replication with names including scopes
      s4:NBT-WINS: pass the expected rcode of the name registration to the test code
      s4:NBT-WINS: test large scopes
      s4:NBT-WINSREPLICATION: don't mark a local variable as static
      s3:libsmb: don't reuse the callers stype variable in cli_NetServerEnum()
      s3:passdb: fix a type Domain Users has RID -513
      libreplace: add check for NSS_WRAPPER_DISABLE similar to SOCKET_WRAPPER_DISABLE
      s4:heimdal_build: allow flex-2.5.35:bison-2.4.1 to regenerate files
      s4:heimdal: regerenate files
      s3: shortcut gid_to_sid when "ldapsam:trusted = yes"
      s3:passdb: speed up pdb_get_group_sid()
      s3:pdb_ldap: try to build the full unix_pw structure with ldapsam:trusted support
      s3:pdb_ldap: optimize ldapsam_alias_memberships() and cache ldap searches.
      s3:pdb_ldap: don't search for the users primary group, if we already know it
      s3:nmbd: also listen explicit on the subnet broadcast addresses
      s3:nmbd: change "nmbd:bind explicit broadcast" into "nmbd bind explicit broadcast"
      s3:docs-xml: document "nmbd bind explicit broadcast"
      s3:smbd: rename api_RNetServerEnum => api_RNetServerEnum2
      s3:smbd: add/improve some DEBUG messages in api_RNetServerEnum2()
      s3:smbd: implement api_RNetServerEnum3
      s3:libsmb: fix NetServerEnum3 rap calls.
      s3:passdb: only use gid_to_sid() result if the result is a group of our local sam
      s3:selftest: make selftest requires bash for now
      s3:smbd: Fix really ugly bool vs. int bug!!!
      s3:smbd: use StrCaseCmp() instead of strcasecmp
      s4:net/drs: use the full path to "utils/net/drs/net_drs*.h"
      s4:net_drs_bind: make some more stuff static
      socket_wrapper: also ignore AF_INET6 in swrap_setsockopt()
      tsocket/bsd: fix do_bind logic for AF_INET
      tsocket/bsd: fix bug #7140 use calculated sa_socklen for bind() in tstream_bsd_connect_send()
      tsocket/bsd: fix bug #7140 autodetect ipv4 and ipv6 based on the remote address if the local address is any
      tsocket/bsd: set IPV6_V6ONLY on AF_INET6 sockets
      tsocket/bsd: fix bug #7115 FreeBSD includes the UDP header in FIONREAD
      tsocket/bsd: fix comment in tdgram_bsd_recvfrom_handler()
      librpc/ndr_drsblobs: use ndr_push_relative_ptr2_start()/_end()
      librpc/ndr_krb5pac: use ndr_push_relative_ptr2_start()/_end()
      librpc/ndr: make ndr_push_relative_ptr2() static
      libndr: give an error when ndr_push_relative_ptr2_start()/_end() is used with the RELATIVE_REVERSE flag
      libndr: implement LIBNDR_RELATIVE_REVERSE handling
      libndr: for now align reverse relative pointers to 2 bytes by default.
      libndr: fix ndr_size_* calculation with relative reverse buffers
      spoolss: use subcontext in NDR_SPOOLSS_PUSH_ENUM_OUT macro.
      ndr_spoolss_buf: use LIBNDR_FLAG_NO_NDR_SIZE in NDR_SPOOLSS_SIZE_*
      spoolss: make all security descriptors and devicemodes 4 byte aligned and add missing subcontexts.
      librpc/ndr: don't overwrite the content in ndr_push_relative_ptr2_end()
      s3:winbindd: never mark external domains as internal!
      s3:selftest: $WORKGROUP doesn't exist, we should use $DOMAIN
      s3:cli_netlogon: keep the the correct negotiate_flags on the cli->dc structure
      s3:spoolss: construct the devmode the same way for level 2 and 8
      s3:rpc_transport_np: handle trans rdata like the output of a normal read
      s3:test_wbinfo_s3: test --check-secret and --change-secret
      s3:selftest: make wbinfo_s3 work on the "member" server too.
      s3:selftest: handle spaces in test names
      s4:libnet: use a connected CLDAP socket.
      s4:torture: use a connected CLDAP socket.
      s4:RPC-DSSYNC: pass the ip address to the cldap code instead of a name
      lib/util: add generate_random_password()
      s4:libnet: use generate_random_password()
      s4:torture/rpc: use generate_random_password()
      s4:pyglue: add generate_random_password()
      s4:provision: use generate_random_password()
      libcli/auth: print the error in the debug message
      s4:dsdb/schema: fix validation of DNs
      s4:ldb_dn: reset dn->ext_comp_num in ldb_dn_explode()
      s4:ldb_dn: remove dn->ext_linearized when ext_components is modified.
      s4:ldb_dn: fix an uninitialized variable (found by make valgrindtest)
      selftest/gdb_backtrace: call "info locals" too
      pidl:NDR/Client.pm: generate explicit _recv functions
      s4:libnet_become_dc: make use of explicit dcerpc_*_recv functions
      s4:libnet: make use of explicit dcerpc_*_recv functions
      s4:dsdb/repl: make use of explicit dcerpc_*_recv functions
      s4:winbind: make use of explicit dcerpc_*_recv functions
      s4:torture/rpc: make use of explicit dcerpc_*_recv functions
      s4:librpc/rpc: make use of explicit dcerpc_*_recv functions
      s4:drepl_notify: don't look at the internals of 'struct rpc_request'
      s4:drepl_out_helpers: don't look at the internals of 'struct rpc_request'
      s4:libnet_become_dc: don't look at the internals of 'struct rpc_request'
      s4:RPC-ECHO: don't look at the internals of 'struct rpc_request'
      s4:RPC-NETLOGON: remove useless rpc callback
      s4:rpc_server/remote: do async calls
      s4:RPC-ECHO: don't ignore errors in the Sleep test now that we support async rpc over ncacn_np
      s3:configure: add --enable-as-needed
      s3:winbindd: add DEBUG(10,...) for the end of each top level
      libcli/auth: add a const to des_crypt112_16()
      s4:torture/nbt: avoid the usage of wrepl_pull_table_send()
      s4:libcli/wrepl: avoid neested named structures
      s4:libcli/wrepl: use UTIL_TEVENT
      s4:libcli/wrepl: convert wrepl_pull_names_send to tevent_req
      s4:libcli/wrepl: convert wrepl_pull_table_send to tevent_req
      s4:libcli/wrepl: convert wrepl_associate_send to tevent_req
      s4:libcli/wrepl: convert wrepl_connect_send to tevent_req
      s4:libcli/wrepl: convert wrepl_associate_stop_send to tevent_req
      s4:libcli/wrepl: add my copyright
      s4:torture/nbt: use wrepl_request() instead of wrepl_request_send() followed by wrepl_request_recv()
      s4:torture/nbt: use wrepl_associate_stop() instead of build the request by hand
      s4:libcli/wrepl: move wrepl_request_send/recv => wrepl_request_internal_send/recv
      s4:libcli/wrepl: rename enum wrepl_request_state => enum wrepl_request_internal_state
      s4:libcli/wrepl: implement wrepl_request_send as a tevent_req based wrapper
      s4:libcli/wrepl: make struct wrepl_request private to winsrepl.c
      s4:libcli/wrepl: add wrepl_socket_is_connected()
      s4:wrepl_out_helpers: add a WREPLSRV_PUSH_NOTIFY_STAGE_WAIT_UPDATE stage
      s4:libcli/wrepl: rewrite the low level request handling to use tevent_queue and tstream_context
      lib/util: change samba_runcmd() to use tevent_req _send/_recv
      s4:dsdb/dns: change callers of samba_runcmd()
      s4:rpc_server/srvsvc: remove unused ZERO_STRUCT(r->out);
      s4:rpc_server/wkssvc: avoid ZERO_STRUCT(r->out) and use already allocated [out,ref] memory
      s4:rpc_server/wkssvc: remove unneeded talloc_reference()
      s4:rpc_server/wkssvc: don't reset [out,ref] pointer to 0
      s4:build/m4/public.m4: add realname argument to SMB_BUILD_LIBRARY()
      nsswitch: build libnss_winbindd.so only for the non merged build
      nsswitch: don't use socket_wrapper for winbind client code
      nsswitch: build libnss_winbind.so with SOVERSION = 2
      drsuapi.idl: finish drsuapi_DsGetNT4ChangeLog idl
      librpc: rerun make idl
      RPC-DSSYNC: fix the build after idl changes
      selftest: let the client also use the dns_host_file
      s4:rpc_server/drsuapi: don't reset [out,ref] pointer to NULL in dcesrv_drsuapi_DsRemoveDSServer()
      NET-API-BECOME-DC: convert to torture api
      s4:selftest: move samba4.net.api.become.dc from skip to knownfail
      s4:torture/libnet/libnet_user.c: fix double free in error path
      RPC-DSSYNC: handle DCERPC_FAULT_OP_RNG_ERROR as not supported for DsGetNT4ChangeLog()
      drsuapi.idl: don't mark drsuapi_DsGetMemberships as [todo]
      librpc: rerun make idl
      pidl:Samba/Python: don't generate methods for functions marked as [todo]
      pidl:Samba4/NDR/Client: don't generate client stubs for function marked as [todo]
      s4:librpc/rpc: add very basic dcerpc_binding_handle infrastructure
      s4:librpc/rpc: prepare dcerpc dependecies before pidl changes
      pidl:Samba4/NDR/Client: generate stubs for dcerpc_binding_handle abstraction
      s4:dsdb/repl: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet: keep a dcerpc_binding_handle for samr and lsa
      s4:libnet/group*: make use of tevent_req based dcerpc_binding_handle stubs
      s4:libnet_become_dc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet_unbecome_dc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_domain.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_group.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_lookup.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_user.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/userinfo.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/usernam.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libnet/libnet_rpc.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_async_helpers.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_getdcname: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_list_trustdom.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_cmd_usersids.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_connect_lsa.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_connect_sam.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_dom_info_trusted.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_init_domain.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:winbind/wb_sam_logon.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:torture/rpc: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:librpc/rpc/dcerpc_schannel.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:librpc/rpc/dcerpc_util.c: make use of use tevent_req based dcerpc_binding_handle stubs
      s4:libcli/composite: get rid of composite_continue_rpc()
      s4:dcom: add a comment about unused code.
      pidl:Samba4/NDR/Client: make the old rpc_request style async functions static
      s4:lib/registry/rpc: convert to use dcerpc_binding_handle stubs
      s4:rpc_server/spoolss: make use of dcerpc_binding_handle stubs
      s4:client: make use of dcerpc_binding_handle stubs
      s4:libcli/util/clilsa.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_join.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_passwd.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_samsync.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_share.c: make use of dcerpc_binding_handle stubs
      s4:libnet/libnet_time.c: make use of dcerpc_binding_handle stubs
      s4:torture/ntp: make use of dcerpc_binding_handle stubs
      s4:torture/libnet: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/echo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dfs.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss.c: fix compiler warnings
      s4:tortore/libnet: fix crash bugs because of incorrect function prototypes
      talloc_stack: make sure we never let talloc_tos() return ts->talloc_stack[-1]
      talloc_stack: reset stackframe pointers to NULL
      s3:smbd: make sure we always have a valid talloc stackframe
      s4:torture/rpc/dsgetinfo.c: fix name resolving for ldap_url
      Revert "Revert "s4-smbtorture: skip extended SetValue test against Samba (both dont survive).""
      s4:torture/rpc/unixinfo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/drsuapi*: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dssync.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dsgetinfo.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/srvsvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/wkssvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/atsvc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/svcctl.c: make use of dcerpc_binding_handle stubs
      s4:tortore/rpc/eventlog.c: rename variable 'b' => 'br'
      s4:torture/rpc/eventlog.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/epmapper.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/initshutdown.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/oxidresolve.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/remact.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/mgmt.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/autoidl.c: make use of dcerpc_binding_handle stubs
      s4:tortore/rpc/spoolss.c: fix compiler warning
      s4:torture/rpc/spoolss.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss_notify.c: fix compiler warnings
      s4:torture/rpc/spoolss_notify.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/spoolss_win.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/winreg.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/remote_pac.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/lsa*: make use of dcerpc_binding_handle stubs
      s4:librpc/rpc: initialize p->binding_handle in dcerpc_secondary_context()
      s4:torture/rpc/samr.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/testjoin.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/schannel.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/netlogon.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samlogon.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/bench.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/dssetup.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samr_accessmask.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samsync.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/samba3rpc.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/handles: check the correct last_fault_code
      s4:torture/rpc/handles.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/frsapi.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/ntsvcs.c: make use of dcerpc_binding_handle stubs
      s4:torture/rpc/browser.c: make use of dcerpc_binding_handle stubs
      s4:utils/net/drs: make use of dcerpc_binding_handle stubs
      pidl:Samba4/Python: remove compiler warnings when using -Wc++
      pidl:Samba4/Python: remove compiler warnings
      s4:librpc/rpc: let pyrpc make use of dcerpc_binding_handle stubs
      pidl:Samba4/Python: make use of dcerpc_binding_handle stubs
      libcli/util: add more NT_STATUS_RPC_* defines
      s3:libsmb/nterr.c: fix/add NT_STATUS_RPC_* codes
      s3:librpc: remove unused stuff
      s4:librpc/rpc: add NCACN_INTERNAL from s3
      lib/util: add allocate_anonymous_shared()
      s3:libsmb: add a smb_signing_init_ex() function
      s3:smbd: add an option to skip signings checks srv_check_sign_mac for trusted channels
      s3:smbd: add smbd_[un]lock_socket() dummies
      s3:smbd: smbd_[un]lock_socket() while accessing the socket to the client
      s3:smbd: send keepalive packets under the socket lock
      s3:smbd: let reply_readbraw_error use the locked socket
      s3:smbd: pass down trusted_channel via receive_smb_talloc()
      s3:param: add "async smb echo handler" option
      s3:smbd: add echo handler information to struct smbd_server_connection
      s3:smbd: setup a shared memory area for the signing state
      s3:smbd: don't use recvfile if the echo handler is active
      s3:smbd: disable sendfile if the echo handler is active
      s3:smbd: disallow readbraw and writebraw if the echo handler is active
      s3:smbd: disable SMB encryption when the echo handler is active
      s3:smbd: don't allow SMB2 if the async echo handler is active
      dcerpc.idl: add nca_s_* status codes from the DCE 1.1 specification
      librpc/rpc: fix dcerpc_errstr() to handle all nca_s_* status codes and fallback to WERROR codes
      s3:librpc/rpc: move prototypes to dcerpc.h
      s4:libnet: don't include librpc/rpc/dcerpc.h directly
      pidl:Samba4/Python: librpc/rpc/dcerpc.h isn't needed anymore
      s4:lib/messaging: pymessaging needs libndr.h
      s4:librpc/rpc/pyrpc.h: librpc/rpc/dcerpc.h isn't needed anymore
      s4:ntlmssp: add a callback_private pointer to gensec_ntlmssp_state
      s4:ntlmssp: add definition of gensec_ntlmssp_context
      s4:ntlmssp: create a gensec_ntlmssp_context between gensec_security and ntlmssp_state
      s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_state
      s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_state
      s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_data
      s4:ntlmssp: add NTLMSSP_FEATURE_* flags from s3
      s4:ntlmssp: remove more whitespaces...
      s4:ntlmssp: replace server_role by a server.is_standalone in (gensec_)ntlmssp_state
      s4:ntlmssp: calculate server names at startup and store them in (gensec_)ntlmssp_state->server.*
      s4:ntlmssp: remove server_name from (gensec_)ntlmssp_state and fill the server.* fields also for the client
      s4:ntlmssp: make user a 'const char *' in (gensec_)ntlmssp_state
      s4:ntlmssp: split gensec_ntlmssp_sign_packet() and ntlmssp_sign_packet()
      s4:ntlmssp: split gensec_ntlmssp_check_packet() and ntlmssp_check_packet()
      s4:ntlmssp: split gensec_ntlmssp_seal_packet() and ntlmssp_seal_packet()
      s4:ntlmssp: split gensec_ntlmssp_unseal_packet() and ntlmssp_unseal_packet()
      s4:ntlmssp: rename gensec_ntlmssp_state => ntlmssp_state
      s4:ntlmssp: remove unused server_multiple_authentications feature.
      s4:ntlmssp: keep a ntlmssp_server_auth_state to transport variables from preauth to postauth hooks
      s4:ntlmssp: move encrypted_session_key to ntlmssp_server_auth_state
      s4:ntlmssp: move NTLM2 session_nonce to ntlmssp_server_auth_state
      s4:ntlmssp: move doing_ntlm2 to ntlmssp_server_auth_state
      s4:ntlmssp: fix some formating
      s4:ntlmssp: use a 'bool ok' helper variable to make the code more readable
      s4:ntlmssp: inline ntlmssp_weakend_keys()
      s4:ntlmssp: rename calc_ntlmv2_key => calc_ntlmv2_key_talloc
      s4:ntlmssp: add calc_ntlmv2_key() from source3
      s4:ntlmssp: make use of calc_ntlmv2_key() for seal keys
      s4:ntlmssp: avoid usage of calc_ntlmv2_key_talloc()
      s4:ntlmssp: copy dump_arc4_state() from source3
      s4:ntlmssp: make use of dump_arc4_state()
      s4:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union
      s3:ntlmssp: use uint8_t in calc_ntlmv2_key()
      s3:ntlmssp: make use of C99 types in ntlmssp_sign.c
      s3:ntlmssp: replace server_role by a server.is_standalone in ntlmssp_state
      s3:ntlmssp: pass names to ntlmssp_server_start() and store them in ntlmssp_state
      s3:ntlmssp: remove server_name from ntlmssp_state and fill the server.* fields also for the client
      s3:ntlmssp: pass names and use_ntlmv2 to ntlmssp_client_start() and store them
      s3:ntlmssp: remove unused get_global_myname() and get_domain() from ntlmssp_state
      s3:ntlmssp: add some consts
      s3:ntlmssp: rename void *auth_context; into void *callback_private;
      s3:ntlmssp: make send_seal_key and recv_seal_key local variables
      s3:ntlmssp: inline ntlmssp_weaken_keys()
      s3:ntlmssp: fix some formating
      s3:ntlmssp: use a 'bool ok' variable to make the code more readable
      s3:ntlmssp: make whole_pdu const for ntlmssp_[un]seal_packet()
      s3:ntlmssp: add const for *sig in ntlmssp_unseal_packet()
      s3:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union
      s3:ntlmssp: remove unused ntlmssp_set_workstation()
      s3:ntlmssp: use client.netbios_name instead of workstation
      s3:ntlmssp: use c99 types
      s4:libcli/wrepl: correctly remove the tstream_context when the connection is dead
      s3:passdb: avoid sid_to_gid() if the sid is "domain users"
      s4:torture/rpc/echo.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/echo.c: remove NTSTATUS status variables
      s4:torture/rpc/samsync.c: add explicit check for NTSTATUS r.out.result
      s4:torture/rpc/lsa.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_join.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_samsync.c: add explicit check for NTSTATUS r.out.result
      s4:libnet/libnet_passwd.c: add explicit check for NTSTATUS r.out.result
      pidl:Samba4/Client: don't mix rpc and application NTSTATUS errors anymore for the new bindings
      s3:libsmb: don't let cli_shutdown() segfault with a NULL cli_state
      s3:libsmb: add cli_state_is_connected() function
      s3:rpc_transport_np: use cli_state_is_connected() helper
      s3:rpc_transport_np: add comment about bad usage in a destructor
      s3:rpc_client: don't mix layers and keep a reference to cli_state in the caller
      s3:rpc_client: add rpccli_is_connected()
      s3:rpc_client: add set_timeout hook to rpc_cli_transport
      s3:rpc_client: return at least 10 sec as old timeout in rpccli_set_timeout() instead of 0
      s3:winbindd_cm: use cli_state_is_connected() helper function
      s3:winbindd_cm: use rpccli_is_connected() helper function
      s3:winbindd: consistently use TALLOC_FREE(conn->foo_pipe) is we create a new connection
      s3:winbindd_cm: invalidate connection if cm_connect_netlogon() fails
      s3:winbindd_reconnect: don't only reconnect on NT_STATUS_UNSUCCESSFUL
      s3:rpc_client: remove unused code, we handle transport failures in the transport layer now
      s3:rpc_client: remove more unused code
      s3:winbindd: correctly retry if the netlogon pipe gets disconnected during a logon call
      s3:libads: retry with signing after getting LDAP_STRONG_AUTH_REQUIRED
      s3:smbd: handle SMB2 in deadtime_fn() and avoid disconnecting non idle clients
      s3:winbindd: make sure we don't try rpc requests against unaccessable domains
      s3:winbindd: only set child_domain in the child
      s3:winbindd: correctly invalidate the cached connection
      s3:winbindd: fix problems with SIGCHLD handling (bug #7317)
      s3:winbindd: remove unused variables
      build: make use on_results=True for some build rules
      Revert "socket-wrapper: not all systems have FIONREAD defined"
      s3:winbindd: make "smbcontrol winbindd validate-cache" reliable again
      s4:heimdal_build/wscript_build: create a HEIMDAL_ROKEN*_SOURCE variable
      s4:heimdal_build/wscript_build: remove useless dependecies of HEIMDAL_ROKEN_H
      s4:heimdal_build/wscript_build: we don't need separate subsystems just for optional source files
      lib/torture: also print intergers as HEX values in the torture_assert macros
      dcerpc.idl: fix typo DERPC_ => DCERPC_
      librpc: rerun make idl
      librpc/rpc: fix typo DERPC_ => DCERPC_
      s4:librpc/rpc: correctly initialize last_fault_code for bind and alter_context requests
      s4:torture/rpc/lsa.c: add test_lsa_OpenPolicy2_ex() that takes an expected status
      RPC-ALTERCONTEXT: let the test pass against w2k3 and w2k8
      s4:selftest: mark some smb2.compound tests as knownfail
      selftest: make sure filter-subunit and format-subunit use unbuffered io
      lib/replace: create a LIBREPLACE_H subsystem
      s4:heimdal_build/wscript_build: use LIBREPLACE_H for asn1_compile and compile_et
      s4:heimdal_build/wscript_build: remove more network related stuff from HEIMDAL_ROKEN_H
      s4:configure: generate Makefile from Makefile.in
      s4:autogen-waf: generate 'Makefile' instead of 'makefile'
      lib/replace/wscript: inline LIBREPLACE_GETPASS into 'replace'
      lib/replace/wscript: implement the same getpass detection logic as the autoconf version
      lib/replace/wscript: rename REPLACE_H_SOURCE => REPLACE_HOSTCC_SOURCE
      s4-waf: inline LIBREPLACE_NETWORK into 'replace'
      wafsamba: allow passing 'use_hostcc' to SAMBA_SUBSYSTEM()
      lib/replace/wscript: rename LIBREPLACE_H => LIBREPLACE_HOSTCC
      s4:heimdal_build/wscript: rename HEIMDAL_ROKEN_H => HEIMDAL_ROKEN_HOSTCC
      lib/replace/wscript: add dependency to 'dl'
      lib/nss_wrapper/wscript_build: 'replace' already includes 'dl'
      s4:param/wscript_build: 'dl' is provides via 'replace'
      lib/replace/wscript: inline LIBREPLACE_EXT into 'replace' as the autoconf system does
      wafsamba: don't add global dependencies to hostcc targets
      lib/replace/wscript: avoid global deps for LIBREPLACE_HOSTCC
      s4:heimdal_build/wscript_build: avoid global deps for hostcc stuff
      Remove unused swat2 code
      Remove unused pcp/ directory.
      s4:tortore/rpc/spoolss.c: fix declaration after code warning
      s4:tortore/rpc/spoolss: some compilers don't like .foo.bar = 5
      testprogs/blackbox/test_kinit: reorder arguments to "net time" to fix make test
      buildtools/wafsamba: make sure CHECK_FUNC() and CHECK_VARIABLE() work with -O3 in the CFLAGS
      s4:librpc/rpc: make PyErr_SetDCERPCStatus() static
      s4:librpc/rpc: the python bindings should use !NT_STATUS_IS_OK instead of NT_STATUS_IS_ERR
      s4:torture/rpc/dsgetinfo: first check the rpc layer status before looking at the application result
      s4:torture/rpc/winreg: fix compiler warnings
      s4:torture/rpc: rename rpc.h => torture_rpc.h
      s4:selftest/wscript: --enable-selftest and --with-selftest-prefix are configure options
      s4:winbind: wbsrv_samba3_priv_pipe_dir() needs to return the directory not the pipe path
      s4:winbind: use WINBINDD_SOCKET_NAME instead of WINBINDD_SAMBA3_SOCKET
      s4:libnet/libnet_join: don't look at p->last_fault_code for debugging anymore
      s4:util/net/drs: don't look at p->last_fault_code for debugging anymore
      s4:torture/rpc: don't look at p->last_fault_code for debugging anymore
      librpc/rpc: add dcerpc_fault_to_nt_status()
      pidl:Samba4/NDR/Client: map NT_STATUS_NET_WRITE_FAULT to the matching NT_STATUS_RPC_* code
      s4:librpc/rpc/pyrpc.c: map NT_STATUS_NET_WRITE_FAULT to the matching NT_STATUS_RPC_* code
      s4:torture/rpc/lsa.c: test for NT_STATUS_RPC_SS_CONTEXT_MISMATCH instead of NT_STATUS_NET_WRITE_FAULT
      s4:torture/rpc/handles.c: check for NT_STATUS_RPC_SS_CONTEXT_MISMATCH instead of DCERPC_FAULT_CONTEXT_MISMATCH
      s4:torture/rpc/alter_context.c: check for NT_STATUS_RPC_BAD_STUB_DATA instead of NT_STATUS_NET_WRITE_FAULT
      s4:torture/rpc/dssync.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/alter_context: check for NT_STATUS_RPC_PROTOCOL_ERROR instead of DCERPC_NCA_S_PROTO_ERROR
      s4:torture/rpc/countcalls.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/drsuapi.c: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE instead of DCERPC_FAULT_INVALID_TAG
      s4:torture/rpc/samr.c: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of DCERPC_FAULT_OP_RNG_ERROR
      s4:torture/rpc/scanner.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:torture/rpc/spoolss.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:torture/rpc/dsgetinfo.c: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE instead of DCERPC_FAULT_INVALID_TAG
      s4:torture/rpc/autoidl.c: check for NT_STATUS_RPC_* instead of p->last_fault_code
      s4:libnet_rpc: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE instead of NT_STATUS_NET_WRITE_FAULT
      s4:libnet_passwd: check for NT_STATUS_RPC_PROCNUM_OUT_OF_RANGE in the ChangePassword calls
      s4:libnet_passwd: check for NT_STATUS_RPC_ENUM_VALUE_OUT_OF_RANGE for SetPassword
      s4:torture/rpc/countcalls: check for NT_STATUS_IS_RPC() instead of NT_STATUS_NET_WRITE_FAULT
      s4:dynconfig/wscript: ${LOCALSTATEDIR} already has var/ included
      Revert "s4:"dns_update_list" file: install it properly into the private directory"
      Revert "Revert "s4:script/installmisc.sh - install "dns_update_list" to target setup folder""
      s4:setup/wscript_build: install dns_update_list into ${SETUPDIR}
      s4:rootdse: only return "tokenGroups", when the client asked for them
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_TRUSTDOM
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_GROUPS
      s4:winbind: fill response.data.num_entries for WINBINDD_LIST_USERS
      s4:rpc_server/netlogon: add no memory checks
      s4:dynconfig: fix the autoconf build and pass -DPYTHONDIR=\"$(pythondir)\"
      lib/zlib/wscript: fix system zlib detection
      buildtools/wafsamba: make sure we create bin/default/ before trying to create symlinks in it
      buildtools/wafsamba: inline defines during configure into the tests
      lib/replace: add replacement for IPV6_V6ONLY on linux systems with broken headers
      lib/replace/wscript: add replacement for IPV6_V6ONLY on linux systems with broken headers
      lib/replace: make sure IPV6_V6ONLY is available for IPv6 support
      lib/replace/wscript: make sure IPV6_V6ONLY is available for IPv6 support
      Revert "tsocket: not all systems have IPV6_V6ONLY"
      lib/tsocket: add tsocket_address_is_inet() function
      lib/tsocket: add tsocket_address_is_unix() function
      s4:dsdb/common: if we don't have the ip of the client return the server site as client site
      s4:cldap_server: allow src_address = NULL in fill_netlogon_samlogon_response()
      s4:service_named_pipe: use the passed client and server addresses
      s4:rpc_server: remember the local and remote address
      s4:rpc_server/netlogon: use tsocket_address in dcesrv_netr_DsRGetDCNameEx2()
      s4:rpc_server/spoolss: use tsocket_address in dcesrv_spoolss_check_server_name()
      s4:rpc_server/srvsvc: pass tsocket_address to the ntvfs layer
      s4:rpc_server: remove 'socket_address' based functions
      s4:ntvfs: add tsocket based addresses to ntvfs_context
      s4:smb_server: pass tsocket_addresses to the ntvfs layer
      s4:ntvfs/ipc: pass the already given tsocket_address structures to the named_pipe_auth code
      s4:ntvfs: remove socket_address based functions
      s4:ntvfs/ipc: remote // debug comments
      s4:smb_server: remove unused socket_address functions
      s4:smb_server: use tsocket_address_string() to display the client address
      s4:smb_server: use tsocket_address_string() for debugging the client address
      s4:wrepl_server: use tsocket_address functions to get the peer ip
      s4:lib/registry: fix the waf build
      s4:wrepl_server: use tsocket_address functions to get the peer ip
      s4:smb_server: use tsocket_address_string() for debugging the client address
      s4:web_server: use tsocket_address functions to get the local ip and port
      s4:rpc_server: remove unused socket_address based functions
      s3:smbd: keep local and remote tsocket_address per connection
      s4:web_server: use tsocket_address functions to get the local ip and port
      libcli/named_pipe_auth: we need to hide length of the message mode header from the caller
      s4:smb_server/smb: SMBreadX can return STATUS_BUFFER_OVERFLOW
      s3:smbd: add comment about returning STATUS_BUFFER_OVERFLOW in pipe_read_andx_done()
      s3:smbd: make fsp->fake_file_handle a talloc child of fsp
      s4:dynconfig: reorder non fhs variables
      s4:dynconfig: fix fhs variables and list them all explicit
      s4: remove unused references to swat
      dsdb/password_hash: remove usage of msDs-KeyVersionNumber
      s4:selftest: add --socket-wrapper[-keep]-pcap options to "waf test"
      s4:blackbox password tests - more complex passwords
      s4:setup: mark DSDB_CONTROL_DN_STORAGE_FORMAT_OID as allocated
      s4:password_hash - Implement password restrictions
      README.Coding: fix good example
      s4:dsdb/password_hash: only try to handle a hash in the unicodePwd field if it's given
      Revert "s4:password hash LDB module - check that password hashes are != NULL before copying them"
      Revert "s4:password_hash LDB module - don't break the provision"
      s3:Makefile: build smbtorture4 as static binary with socket_wrapper support
      s4:heimdal_build: remove heimdal/lib/hcrypto/evp-cc.c from the build
      s4:heimdal: remove unused heimdal/lib/hcrypto/evp-cc.c
      tdb: commit ABI/tdb-1.2.2.sigs
      s4:dsdb: cached results of samdb_rodc()
      s4:heimdal_build: remove heimdal/lib/hcrypto/evp-cc.c from autoconf build
      s4:heimdal_build: undefine __APPLE__ as we don't need that magic
      s4:librpc: remove explicit ../librpc/gen_ndr/ndr_drsblobs.o from python_drsblobs
      s4:dsdb: fix samdb_result_logon_hours() and don't hardcode units_per_week
      s3:build: build smbtorture4 when the merged build is selected
      s4:heimdal_build: move #undef __APPLE__ to the end of roken.h
      wafsamba: use -D_XOPEN_SOURCE=700 for the build
      lib/util: fix waf configure tests for xattr functions on Mac OS 10.
      Revert "wafsamba: use -D_XOPEN_SOURCE=700 for the build"
      s4:dynconfig: let the autoconf build compile again
      s4:librpc: fix the autoconf build
      testprogs/win32/spoolss: rename Makefile => NMakefile
      testprogs/win32/spoolss: rename Makefile.mingw GNUmakefile
      testprogs/win32: explain how to use nmake with NMakefile
      testprogs/win32/npecho: use 'rm -f' instead of 'del' on unix
      testprogs/win32/spoolss: we don't need absolute pathes to mingw locations
      testprogs/win32: make it possible to specify MINGW_CC
      s4:ldb-samba: handle more GUID attributes
      s3-waf: Also include source4/ when looking for headers
      s3-waf: Add autogeneration with PIDL
      s4:ldb: add --controls support to ldbedit
      s4:libnet: use the new generated config from the provision for the self_join
      s4:ldb_controls: make it possible to pass arbitrary control via the command line
      s3:rpc_server: make sure we don't send uninitialized memory for the named_pipe_auth handshake
      s3:rpc_server: add np_read_in_progress() function
      s3:smbd: add PIPE_BUSY handling for SMBtrans calls on named pipes
      s3:rpc_server: pass down local and remote tsocket_address to np_open()
      s3:Makefile.in: add npa_tstream.o to the build of smbd
      s3:rpc_server: make use of the npa_tstream code to connect to named pipes
      s4-waf: Fixed the ldb build.
      buildtools/wafsamba: use build group 'final' for the creation of manpages
      s3:winbindd: make sure we only call static_init_idmap once
      s4:lib: merge LDB_WRAP and LDBSAMBA and make LDBSAMBA a library.
      pidl/wscript: call pod2man with the detected perl version
      pidl/wscript: only try to build pidl manpages if pod2man is available
      pidl/wscript: build manpages in build group 'final'
      selftest/Samba3: remove unused create_clientconf() function
      selftest: use for the client
      selftest/Samba4: let localvampiredc use
      selftest/Samba4: let localfl2000dc use
      selftest/Samba4: make the naming of passwords more consistent
      s4:torture/rpc/remote_pac: use dcerpc_netr_LogonSamLogon_r() instead of dcerpc_netr_LogonSamLogon()
      s4:provision: don't use hardcoded 'Default-First-Site-Name'
      s4:ldb-samba: fix the build without a system ldb
      s4:ldb: only do ABI checking for the standalone build for now
      Revert "s4:ldb-samba: fix the build without a system ldb"
      libcli/named_pipe_auth: fix memory handling for temporary data
      libcli/named_pipe_auth: fix error handling in _tstream_npa_connect_recv()
      testprogs/win32: add prepare_dcpromo tool
      s4:provision: pass relax control also to modify_ldif
      s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'
      s4:dsdb/ridalloc: add comment about windows behavior regarding rIDUsedPool
      s4:provision: add --next-rid option
      s4:provision: move Samba4 specific DNS stuff to its own file
      s4:provision: add entries for root dns servers
      s4:ldap_server: don't start if we can't bind to port 389
      s4:ldb/python: make it possible to run tests standalone
      s4:dsdb: move dsdb python tests from lib/ldb/ to dsdb/
      s4:dsdb/password_hash: fix some c++ compiler warnings
      s4:dsdb/password_hash: implement DSDB_CONTROL_BYPASS_PASSWORD_HASH_OID
      s4:dsdb: add dsdb_msg_constrainted_update_int32/64() functions
      s4:dsdb: add dsdb_module_constrainted_update_int32/64() functions
      s4:dsdb: add dsdb_msg_constrainted_update_uint32/64() wrapper functions
      s4:dsdb: add dsdb_module_constrainted_update_uint32/64() wrapper functions
      s4:dsdb:ridalloc.c: fix C++ warning
      s4:dsdb:ridalloc: use dsdb_module_constrainted_update_uint64() to update rIDAvailablePool
      s4:dsdb:ridalloc: add ridalloc_ridset_values infrastructure
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_create_rid_set_ntds()
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_allocate_rid()
      s4:dsdb:ridalloc: use ridalloc_ridset_values infrastructure in ridalloc_allocate_rid_pool_fsmo()
      s4:drepl_ridalloc: only ask the rid master for a new rid pool if we need to.
      s4:drepl_out_helpers: don't return NT_STATUS_OK, if an extended operation doesn't return success
      s4:dsdb/repl: expose drsuapi_DsExtendedError to the caller (e.g. the ridalloc client)
      selftest/Samba4: set dreplsrv:periodic_startup_interval = 0
      s4:selftest: run RPC-SAMR-LARGE-DC against the vampire_dc to test the rid alloc code
      s4:drsuapi: don't return all linked attributes at the same time
      s4:drepl_notify: hide some bugs from the make test output
      s4:buildtools: make it possible to use advanced test options via the make waf wrapper
      s4:buildtools: add 'make show_waf_options'
      s4:libnet_UserList: allocate children strings on the correct talloc parent
      s4:libnet_GroupList: allocate children strings on the correct talloc parent
      s4:wb_cmd_list_users: also handle NT_STATUS_NO_MORE_ENTRIES
      s4:wb_cmd_list_groups: also handle NT_STATUS_NO_MORE_ENTRIES
      s4:winbind: let WBSRV_SAMBA3_SET_STRING() initialize the whole buffer
      testprogs/blackbox/subunit.sh: initialize failed to 0
      s4:provision: also use fixed GUID names of the default group policies for domain and domain controllers in tests
      s4:provision: remove --policy-guid and --policy-guid-dc cmdline options
      README.Coding: add examples for good and bad comments
      README.Coding: fix typos

Stephen Gallagher (2):
      tevent: Remove erroneous comments about TEVENT_FD_AUTOCLOSE
      tevent: Added more documentation.

Steven Danneman (5):
      s4/torture: Parameterize output in LOCK tests based off server support
      s3/smbd: Fix string buffer overflow causing heap corruption
      s3/smbd: change locking behavior when "lock spin time = 0".
      s4/torture/smb2: Add two new SMB2 compound tests
      s4:libcli: Modify S4 client library to check for proper CN alignment

Sumit Bose (1):
      s4:rpc_server/lsa/dcesrv_lsa.c - fix typo

Thomas Nagy (8):
      build: replace h_file when replacing md5
      build: allow the waf build to work with python 3.0 and 3.1
      buildtools/wafsamba: fix build group ordering
      s4-waf: Replace local includes in header files with proper system names.
      wafsamba: Disable the abi checks when gdb is not available
      Substitute the pidl files without using 'headermap.txt'
      solve the error "ldb.inst.h does not exist"
      Do not use headermap.txt for the header installation

Tim Potter (1):
      s4-smbd: Fix compiler warning in prefork smbd.

Tim Prouty (1):
      s4 torture: RAW-SEARCH: Only test supported info levels

Torsten Kurbad (1):
      s3: Fix a missing </listitem> in vfs_crossrename.8.xml

Volker Lendecke (615):
      s3: Add a zfsacl:denymissingspecial parameter
      s3: Remove a pointless if-statement
      s3: Lift the version of the scannedonly VFS module
      s3: Fix a winbind segfault in "trusted_domains"
      s3: Fix a crash in libsmbclient used against the OpenSolaris CIFS server
      s3: Fix some nonempty blank lines
      s3: For "smbcontrol <pid> pool-usage", print the first 50 bytes of a string
      s3: Protect against an invalid bcc in SMBsendtxt
      s3: Fix the format string for smbcontrol pool-usage
      s3: Remove a comment from ancient times that no longer applies
      s3: Fix a typo
      s3: Move "yesno" to the only place where it is used: client.c
      s3: Make "init_smb_request" static to process.c
      s3: Initialize the seqnum in "init_smb_request"
      s3:pdb_ldap: Fix large paged search.
      s3: Fix a typo in a comment
      s3: Fix some nonempty blank lines
      s3: Fix some nonempty blank lines
      s3: Use global_sid_Builtin in net_groupmap_memberships
      s3: Remove some pointless uses of string_sid_talloc
      s3: Fix sending NULL sids to lookupsids3
      s3: Remove a call to string_sid_talloc
      s3: Remove string_sid_talloc
      libreplace: Fix a C++ warning
      libcli/security: Remove a call to strncasecmp
      libcli/security: Convert some strtol calls to strtoul
      libcli/security: Fix a valgrind error in dom_sid_parse
      libcli/security: Prohibit SID formats like S-1-5-32-+545
      s3: Add a little torture test for dom_sid_parse
      s3: Make string_to_sid a wrapper around dom_sid_parse
      nsswitch: Make some functions static
      nsswitch: Move nss_err_str to its only caller
      libwbclient: Remove a pointless talloc_strdup
      libwbclient: Use winbindd_free_response()
      s3: Remove some calls to memset -- reduces text size by some bytes for me
      s3: Add wbinfo --ccache-save
      s3: Add the session key to the ccache_ntlm_auth response
      libwbclient: Actually implement wbcCredentialCache()
      s3: Add ccache use to cli_session_setup_ntlmssp
      s3: Add -C (--use-ccache) to popt_common_credentials
      s3: Use -C in smbclient
      s3: Enable -C in rpcclient
      s3: Fix a bug in net's use of popt
      s3: add libnetapi_set_use_ccache()
      s3: Add --use-ccache to net
      s3-libsmbclient: Add smbc_setOptionUseCCache()
      Revert "libcli/security: Prohibit SID formats like S-1-5-32-+545"
      Revert "s3: Make string_to_sid a wrapper around dom_sid_parse"
      Revert "libcli/security: Fix a valgrind error in dom_sid_parse"
      Revert "libcli/security: Convert some strtol calls to strtoul"
      Revert "libcli/security: Remove a call to strncasecmp"
      s3: Enable use of ccache by default for libsmbclient
      s3: Fix some DEBUG messages
      tdb: fix an early release of the global lock that can cause data corruption
      s3: Simplify the code a bit: Catch (len==0) early
      s3: Fix some nonempty blank lines
      s3: Hide some uses of pdb_get_init_flags (which I would love to remove...)
      s3: Make guest_user_info() static
      s3: Remove a pointless if-statement
      s3: Make use of ZERO_STRUCTP
      pam_winbind: Use strchr instead of strstr for a single character
      pam_winbind: Remove a nested if-statement. Bo, please check!
      libwbclient: wbc_create_error_info is always called with mem_ctx==NULL
      libwbclient: wbc_create_password_policy_info is always called with mem_ctx==NULL
      libwbclient: wbc_create_logon_info is always called with mem_ctx==NULL
      s3: Fix some nonempty blank lines
      s3: Fix some comments
      s3: Remove some unused code
      s3: Make cli_get_fs_volume_info() use cli_trans()
      s3: Fix some DEBUG statements
      libreplace: Attempt to fix bug 5910, detect a broken getaddrinfo
      s3: Make pdb_copy_sam_account also copy the group sid
      s3: notify_onelevel does not use seqnums, so don't open asking for it
      s3: Implement global locks in a g_lock tdb
      s3: Add ctdb_conn_msg_ctx()
      s3: setup debug for smbtorture
      s3:torture: add a test LOCAL-DBTRANS to torture dbwrap with transactions.
      s3: Add tdb_data_equal
      s3:dbwrap: If "-n" is given to dbwrap_torture, open db with CLEAR_IF_FIRST
      v3-4-ctdb: Do not do any logrotation
      tdb: Apply some const, just for clarity
      s3: Fix a C++ warning
      s3: Fix a typo
      use ZERO_STRUCT
      s3: Fix some nonempty blank lines
      s3: TREE_NODE -> struct tree_node
      s3: SORTED_TREE -> struct sorted_tree
      s3: Make adt_tree data definitions private to adt_tree.c
      s3: Remove unused comparison fn from "struct sorted_tree"
      s3: Fix typo found by jhell <jhell at DataIX.net>
      s3: Fix bug 5198 -- parse chfn(1)-change gecos field
      s3: Fix Coverity ID 629: DEADCODE
      s3: Fix a typo
      s3-docs: Document 'smbclient -C'.
      s3: Fix handling of processes that died in g_lock
      s3: Optimize g_lock_lock for a heavily contended case
      s3: Avoid a thundering herd in g_lock_unlock
      s3: Avoid starving locks when many processes die at the same time
      s3: Slightly increase parallelism in g_lock
      s3: Fix timeout calculation if g_lock_lock is given a timeout < 60s
      s3: Fix bug 7139
      s3: Add cli_smb()
      s3: Convert cli_raw_ioctl to use cli_smb()
      s3: Convert cli_qpathinfo_basic to use cli_trans()
      s3: Fix a typo
      s3: Remove a "typedef struct"
      s3: Fix some nonempty blank lines
      s3: Slightly simplify the logic of completion_remote_filter
      s3: Add printf why LOCAL-dom_sid_parse failed
      s3: Rename LOCAL-dom_sid_parse to LOCAL-string_to_sid, add some tests
      s3: Make string_to_sid survive the LOCAL-string_to_sid test
      s3: Use the status from cli_raw_ioctl in torture_ioctl_test
      s3: Avoid calling cli_alloc_mid twice in cli_smb_req_iov_send
      s3: Add a talloc_move for the inbuf to cli_smb_recv
      s3: Explicitly handle inbuf in cli_smb_oplock_break_waiter_done
      s3: Explicitly handle inbuf in cli_session_setup_guest_done
      s3: Explicitly handle inbuf in cli_sesssetup_blob_done
      s3: Explicitly handle inbuf in cli_tcon_andx_done
      s3: Explicitly handle inbuf in cli_negprot_done
      s3: Explicitly handle inbuf in cli_echo_done
      s3: Explicitly handle inbuf in cli_ntcreate_done
      s3: Explicitly handle inbuf in cli_open_done
      s3: Explicitly handle inbuf in cli_getattrE_done
      s3: Explicitly handle inbuf in cli_getatr_done
      s3: Explicitly handle inbuf in cli_dskattr_done
      s3: Explicitly handle inbuf in cli_message_start_done
      s3: Explicitly handle inbuf in cli_read_andx_done
      s3: Explicitly handle inbuf in cli_write_andx_done
      s3: Explicitly handle inbuf in cli_trans_done
      s3: Consolidate server_id_self into the equivalent procid_self()
      s3: Consolidate some pid_to_procid() calls to procid_self()
      s3: Make connections_fetch_record() static
      s3: Copy the mapping.c license header to mapping.h
      s3: Fix but 7145 -- duplicate sam and unix accounts
      tdb: If tdb_parse_record does not find a record, return -1 instead of 0
      s3: Fix the CHAIN1 torture test
      s3: Remove unused count_all_current_connections()
      s3: Use talloc_tos() in yield_connection()
      s3: Remove unused "mypid" from count_current_connections() state
      s3: Make connections_forall open connections.tdb r/w
      s3: Make the difference between r/o and r/w in connections_db_ctx more obvious
      s3: Add connections_forall_read()
      s3: Abstract access to sessionid.tdb, similar to conn_tdb.c
      s3: Fix an uninitialized variable warning
      s3: Fix some C++ warnings
      s3: db->persistent==true was handled earlier, make this more obvious
      s3: Remove the unused parameter "persistent" from fetch_locked_internal
      s3: Make "smbcontrol xx debuglevel" print the correct cluster pid
      s3: Fix the build of net_afs.c with --fake-kaserver=yes, bug 7216
      s3: Fix a typo. Thanks to Christian Ambach for pointing me at it :-)
      s3: Fix a NULL pointer dereference
      s3: Make TLDAP_IS_ALPHA and TLDAP_IS_ADH static functions
      s3: Fix a long-standing problem with recycled PIDs
      s3: Make init_smb_request return bool
      s3: Fix some "net registry" usage messages
      s3: Fix a comment
      s3: Actually use mem_ctx in net_g_lock_init()
      s3: Add "g_lock_do" as a convenience wrapper function
      s3: Add "net registry increment"
      s3: Make tdb_wrap_open more robust
      s3: Convert unexpected.tdb to use tdb_wrap_open
      s3: Fix some nonempty blank lines
      s3: Remove some unused code
      s3: Use a switch to implement map_nt_error_from_tdb
      s3: Remove some unused #defines
      s3: Fix an uninitialized variable read
      s3: Fix some nonempty blank lines
      s3: Remove a typedef
      s3: Make login_cache_read take a pointer, avoid a malloc
      s3: Make login_cache_write take a pointer
      s3: Fix bug 7202
      Trim an overlong line
      Use calloc instead of ZERO_STRUCTP in talloc_stackframe_create()
      Use TALLOC_FREE in talloc_pop()
      s3: Fix bug 7202 for multi-threaded applications
      Fix an uninitialized variable
      s3: Fix some nonempty blank lines
      s3: file_walk_table -> files_forall
      s3: Add "log writeable files on exit" parameter
      s3: Fix a bad memleak in winbind
      s3: Implement an asynchronous echo responder process
      s3: Add the "ctdb locktime warn threshold" parameter
      tdb: Fix bug 7248, avoid the nanosleep dependency
      s3: Optimize gencache for smbd exit
      Fix some nonempty blank lines
      tdb: Fix indentation in tdb_new_database()
      s3: Fix some nonempty blank lines
      s3: Make sure our CLEAR_IF_FIRST optimization works for messaging.tdb
      s3: Make sure our CLEAR_IF_FIRST optimization works for the notify tdbs
      s3: Make sure our CLEAR_IF_FIRST optimization works for serverid.tdb
      s3: Add a comment to messaging_tdb_parent_init, this is pretty confusing
      s3: Add a comment to serverid_parent_init, this is pretty confusing
      s3: Add a comment to notify_internal_parent_init, this is pretty confusing
      tdb: Add a non-blocking version of tdb_transaction_start
      s3: Fix typos in a debug message in vfs_init_custom
      Revert "s3: Optimize gencache for smbd exit"
      s3: Use tdb_transaction_start_nonblock in gencache_stabilize
      s3: Fix some nonempty blank lines
      s3: Fix indentation in conv_str_size
      s3: Slightly simplify logic in conv_str_size
      s3: Fix the memory hierarchy in bitmap_talloc
      s3: Use TALLOC_ZERO_ARRAY in bitmap_talloc
      s3: Fix a memleak in bitmap_talloc
      s3: A NULL context might be perfectly valid for bitmap_talloc
      s3: Use bitmap_talloc in loadparm
      s3: Use bitmap_talloc in files.c
      s3: Use bitmap_talloc in init_dptrs
      s3: Use bitmap_talloc for smb1 server tcons
      s3: Use bitmap_talloc in vfs_full_audit.c
      s3: Remove unused bitmap_[allocate|free]
      Attempt to fix the build on AIX, that system seems to have a #define for s_type
      s3: Slightly simplify unmap_unix_group
      s3: Attempt to fix the build on AIX, shm_ptr seems to be a macro there
      s3: Fix bug 7212, "getent group does not return group members"
      s3-winbind: Make append_auth_data() static
      s3: Make check_info3_in_group static
      s3: Ensure null termination in winbindd_pam_chauthtok()
      s3: Fix an error message in winbindd_pam_chauthtok()
      s3: fix a typo in winbind_client_response_written
      s3: Fix a typo in winbindd_pam_logoff
      s3: Ensure NULL termination before printing in winbindd_pam_logoff
      s3: Fix a comment
      s3: Remove some pointless break statements
      s3: Add wbinfo --logoff
      libwbclient: Both talloc_free and wbcFreeMemory deal with NULL
      libwbclient: Fix a memleak in wbcCredentialCache
      libwbclient: Streamline result processing of wbcCredentialCache()
      s3: Fix the GNU ld version detection on SLES
      libwbclient: Fix a memleak in wbcListTrusts
      libwbclient: Fix memleaks in tests
      libwbclient: Fix a memleak in wbcListTrusts
      s3: Fix a cut&paste error in winbindd_list_groups_done
      Fix related to bug #7326 - can't read/write any files with full_audit
      s3: Fix bug 7327 -- Build fails while building without kerberos
      s3: Fix a typo
      s3: Remove the separate "child" argument from setup_domain_child()
      libwbclient: Fix some memleaks in the tests
      s3: TALLOC_FREE(command) correctly in map_username()
      s3: Use talloc_tos() as talloc ctx for fd_lines_load() in map_username()
      s3: Fix a typo
      s3: Check 0 termination in GETALIASES
      libwbclient: Ensure correct 0-termination in wbcGetSidAliases
      libwbclient: Fix a memleak in wbcGetDisplayName
      s3: Remove domain selection from dual_pam_auth
      s3: Use IS_DC macro in get_global_sam_name()
      s3: Cosmetics -- I could not spot where "chal" was initialized
      s3: Fix some nonempty lines
      s3: Make "auth_context" its own talloc parent
      s3: Fix a typo
      s3: Remove the make_auth_methods routine
      s3: Fix a memleak in user_in_group_sid
      s3: Use talloc_stackframe() in create_token_from_username
      s3: Use talloc_stackframe() in user_in_group_sid
      s3: Use talloc_stackframe() in user_in_group
      s3: Use sizeof(chal) instead of a constant
      libcli/auth: Fix an uninitialized variable
      s3: Move user_in_group() and create_token_from_username() to token_utils.c
      s3: Replace "auth_context" by "challenge" in sam_password_ok args
      s3: Replace "auth_context" by "challenge" in need_to_increment_bad_pw_count args
      s3: Make check_sam_security public
      s3: Move check_sam_security to auth/check_sam.c
      s3: Move make_server_info to auth/server_info.c
      s3: Move sanitize_username to lib/util_str.c
      s3: Move make_server_info_sam to auth/server_info_sam.c
      s3: Move [make|free]_user_info to auth/user_info.c
      s3: Move serverinfo_to_SamInfoX to auth/server_info.c
      s3: Cache the result of the username map script
      s3: Remove a bogus 0-check, "isspace" can not return true for \0
      s3: Little refactoring: Factor out skip_space
      s3: Apply some const
      s3: Cache the username map in gencache
      libwbclient: Remove a pointless variable
      libwbclient: Re-Fix a bug that was fixed with e5741e27c4c
      s3-winbind: Authenticate SAM users
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Slightly simplify the logic of check_password_complexity()
      s3: Slightly simpify samr_ValidatePassword_Change
      s3: Slightly simpify samr_ValidatePassword_Reset
      nsswitch: Fix a memleak in wbinfo
      s3: Fix a typo in winbindd_ccache_save
      s3: Fix a memleak in discover_dc_netbios
      s3: Fix indentation in remove_ccache
      libwbclient: Add wbcAllocateMemory()
      libwbclient: Make wbcLibraryDetails not use talloc
      libwbclient: Make wbcGuidToString not use talloc
      libwbclient: Make copy_passwd_entry not use talloc
      libwbclient: Make copy_group_entry not use talloc
      libwbclient: Convert wbcSidToString to not use talloc
      libwbclient: Add wbcStrDup
      libwbclient: Make wbcLookupSid not use talloc
      libwbclient: Test wbcLookupRids
      libwbclient: Add wbcAllocateStringArray
      libwbclient: Make wbcLookupRids not use talloc
      libwbclient: Fix some pointless macro calls
      libwbclient: Take -21 into account in length guessing
      libwbclient: Fix some pointless macro calls
      libwbclient: Simplify test_wbc_domain_info a bit
      libwbclient: Test wbcGetSidAliases
      s3: Add some debug to GETSIDALIASES
      libwbclient: Make wbcGetSidAliases not use talloc
      winbindd: Fill in num_entries where available
      libwbclient: Make wbcListUsers not use talloc
      libwbclient: Make wbcListGroups not use talloc
      libwbclient: Test wbcGetDisplayName
      libwbclient: Make wbcGetDisplayName not use talloc
      libwbclient: Make _SID_COMPOSE a function instead of a macro
      libwbclient: Test wbcAuthenticateUser[Ex]
      libwbclient: Make wbcInterfaceDetails not use talloc
      libwbclient: Make wbcDomainInfo not use talloc
      libwbclient: Make wbcResolveWinsByName not use talloc
      libwbclient: Make wbcResolveWinsByIP not use talloc
      libwbclient: Make wbcAddNamedBlob not use talloc
      libwbclient: Test wbcLogonUser
      s3: Convert WINBINDD_PAM_AUTH to the new async API
      s3: Convert WINBINDD_PAM_AUTH_CRAP to the new async API
      s3: Convert WINBINDD_PAM_CHAUTHTOK to the new async API
      s3: Convert WINBINDD_PAM_LOGOFF to the new async API
      s3-winbind: Allow changing the password for pdb
      libwbclient: Abstract out test_wbc_authenticate_user for reuse
      libwbclient: Test wbcChangeUserPassword
      s3: Change the make test password to "testPw"
      libwbclient: Make wbcLookupUserSids not use talloc
      libwbclient: Make wbcLookupDomainController not use talloc
      libwbclient: Make wbc_create_domain_controller_info_ex not use talloc
      libwbclient: Make wbcGetGroups not use talloc
      libwbclient: Test wbcGetGroups
      libwbclient: Make wbc_create_password_policy_info not use talloc
      libwbclient: Make wbc_create_auth_info not use talloc
      libwbclient: Make wbc_create_logon_info not use talloc
      libwbclient: Make wbcAuthenticateUserEx not use talloc
      libwbclient: Make wbcCredentialCache not use talloc
      libwbclient: Make wbc_create_error_info not use talloc
      libwbclient: Make wbcListTrusts not use talloc
      libwbclient does not need talloc_free anymore
      libwbclient: remove async libwbclient and talloc from libwbclient.so
      s3: Test for wb ccache access by smbclient
      nsswitch: Add wbinfo --pam-logon
      s3: Move the in-memory ccache to the parent
      s3: Remove a leftover of my lua experiments
      libwbclient: Fix wbcListUsers against too small num_entries
      libwbclient: Fix wbcListGroups against too small num_entries
      libwbclient: wbcFreeMemory deals fine with a NULL pointer
      s3: Fix a cut&paste error in a debug message in check_oem_password()
      s3: Fix a winbind crash when scanning trusts
      s3: Convert WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP to the new async API
      libwbclient: Remove some pointless BAIL_ON_WBC_ERROR macro calls
      s3: replace some data_blob_talloc by data_blob_const
      libwbclient: Actually copy something in wbcChangeUserPasswordEx
      s3: init_dc_connection() can't init for internal domains
      s3: Allow pdb password change using WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP
      s3: Simplify (bool != True) to !bool
      s3: sendto_domain() is lo longer used
      Revert "nsswitch: Fix a memleak in wbinfo"
      libwbclient: Talloc is no longer used
      s3: Make "struct trustdom_state" its own talloc context
      s3: Simplify trustdom_state
      s3: Convert add_trusted_domains() to wb_domain_request_send()
      s3: async_domain_request is no longer used
      s3: Implement "net rpc user setprimarygroup"
      s3: Make a debug msg more readable
      s3: Fix some nonempty blank lines
      s3: Fix an uninitialized variable in idmap_tdb2_sid_to_id()
      s3: range-check idmap script output
      s3: Fix the code order in append_auth_data
      s3: Fix a typo
      s3: Fix a memleak in check_pac_checksum
      s3: Fix bug 5972 -- remove -L testparm parameter
      s3: Fix the build
      s3: Test for "__attribute__((destructor))"
      libwbclient: Fix a fd-leak at dlclose-time
      s3: Remove unreachable code
      s3: Attempt to fix the non-gnumake build
      s3: Next step to fix the build on OpenSolaris
      s3: Factor out compiler-independent defines
      s3: Another non-gnumake fix
      s3: Fix a typo found by ITPFS oota <t-oota at dh.jp.nec.com>
      fix a typo
      s3: Remove an unused variable
      s3: Fix a bad memleak in the async echo responder
      s3: Don't announce readraw and writeraw with the async echo responder
      s3: Fix some debug messages
      s3: Add vfs_linux_xfs_sgid
      s3: Fix the build of the nfsv4 acl code
      Revert "s3:auth Change auth_ntlmssp_server_info API to return NTSTATUS"
      Revert "s3:smbd Give the kerberos session key a parent"
      Revert "s3:smbd Fix segfault if register_existing_vuid() fails"
      s3: Fix bug 7253
      tevent: Fix maxfd calculation in tevent_select
      s3: Add a dummy test to prove the maxfd calculation
      s3: Fix EnumDomainAliases when no aliases are in LDAP
      s3: Fix starving the echo responder
      s3: Fix some nonempty lines
      s3: Add "smbd_server_connection" to smb_request
      s3: Pass sconn to init_smb_request()
      s3: Use "sconn" argument in smbd_[un]lock_socket_internal
      s3: Initialize smb_request->sconn in smbd_smb2_fake_smb_request
      s3: Remove sconn arg from smbd_notify_cancel_by_smbreq
      s3: Remove some global references to smbd_server_conn
      s3: Explicitly pass sconn to negprot_spnego()
      s3: Remove smbd_server_conn from reply_smb2002
      s3: Remove smbd_server_conn from send_nt_replies
      s3: Remove smbd_server_conn from reply_ntcancel
      s3: Remove smbd_server_conn from change_to_user
      s3: Remove smbd_server_conn from make_connection_snum
      s3: Remove smbd_server_conn from reply_tcon
      s3: Remove smbd_server_conn from reply_tcon_and_X
      s3: Remove smbd_server_conn from reply_search
      s3: Remove smbd_server_conn from reply_fclose
      s3: Remove smbd_server_conn from reply_ulogoffX
      s3: Remove smbd_server_conn from reply_send_file_readbraw
      s3: Remove smbd_server_conn from reply_readbraw
      s3: Remove smbd_server_conn from reply_lockread
      s3: Remove smbd_server_conn from reply_read
      s3: Remove smbd_server_conn from send_file_readX
      s3: Remove smbd_server_conn from reply_read_and_X
      s3: Remove smbd_server_conn from reply_writebraw
      s3: Remove smbd_server_conn from reply_rmdir
      s3: Remove smbd_server_conn from smbd_do_locking
      s3: Pass sconn explicitly to reply_special
      s3: Explicitly pass sconn to reply_readbraw_error
      s3: Explicitly pass sconn to is_valid_writeX_buffer
      s3: Remove smbd_server_conn from register_existing_vuid
      s3: Remove smbd_server_conn from send_trans2_replies
      s3: Remove smbd_server_conn from call_trans2findfirst
      s3: Remove smbd_server_conn from call_trans2findnext
      s3: Remove smbd_server_conn from smbd_do_qfsinfo
      s3: Remove smbd_server_conn from call_trans2setfsinfo
      s3: Remove smbd_server_conn from reply_findclose
      s3: Remove smbd_server_conn from send_trans_reply
      s3: Explicitly pass sconn to the api_ functions
      s3: Remove smbd_server_conn from reply_spnego_kerberos
      s3: Remove smbd_server_conn from reply_spnego_ntlmssp
      s3: Remove smbd_server_conn from reply_spnego_negotiate
      s3: Remove smbd_server_conn from reply_spnego_auth
      s3: Remove smbd_server_conn from reply_sesssetup_and_X_spnego
      s3: Fix a typo
      s3: Remove smbd_server_conn from reply_sesssetup_and_X
      s3: Remove smbd_server_conn from change_notify_add_request
      s3: Explicitly pass sconn to the change_notify_remove_request
      s3: change_notify_reply() does not need its "conn" argument
      s3: Explicitly pass sconn to the remove_pending_change_notify_request_by_mid
      s3: Remove smbd_server_conn from break_level2_to_none_async
      s3: Remove smbd_server_conn from switch_message
      s3: Remove smbd_server_conn from brl_timeout_fn
      s3: Remove smbd_server_conn from push_blocking_lock_request
      s3: Remove smbd_server_conn from cancel_pending_lock_requests_by_fid
      s3: Explicitly pass sconn to remove_pending_lock_requests_by_mid_smb1
      s3: Explicitly pass sconn to blocking_lock_was_deferred_smb1
      s3: Explicitly pass sconn to recalc_brl_timeout
      s3: Remove smbd_server_conn from blocking_lock_cancel_smb1
      s3: Explicitly pass sconn to process_blocking_lock_queue
      s3: Explicitly pass sconn to find_open_smb2req
      s3: Explicitly pass sconn to open_was_deferred_smb2
      s3: Explicitly pass sconn to [remove|schedule]_deferred_open_message_smb2
      s3: Remove smbd_server_conn from push_blocking_lock_request_smb2
      s3: Explicitly pass sconn to process_blocking_lock_queue_smb2
      s3: Remove smbd_server_conn from cancel_pending_lock_requests_by_fid_smb2
      s3: Remove the pointless SERVICE macro
      s3: Remove the pointless PRINTERNAME macro
      s3: Remove some leftovers from macros
      s3: Remove fsp_belongs_conn
      Fix aio_read detection for -lrt
      s3: Remove some dispensable ()
      s3: Make g_smb_perfcount_handlers static
      s3: Fix a type-punned warning
      s3: Remove an unreachable line of code
      s3: Fix some enum/int mixup warnings
      tsocket: Fix some type-punned warnings
      tldap: Fix a type-punned warning
      s3-winbind: Make KRB5_EVENT_REFRESH_TIME a function
      s3: Fix some valgrind errors
      s3: Fix a winbind crash
      s3: Fix a winbind crash
      s3: In copy_netr_SamInfo3 copy all of the sids array
      s3: In make_server_info_info3, check the result of copy_netr_SamInfo3
      s3: Fix some valgrind errors
      s3: Do an early TALLOC_FREE
      s3: free -> SAFE_FREE
      s3: Re-arrange winbindd_ads.c:query_user
      s3: Fix a valgrind error
      s3: More cleanup in winbindd_ads.c:query_user
      s3: Make some routines static in smbldap
      wbinfo: Fix error messages
      s3: Fix bug 7336: Enable idmap_passdb module build as shared
      s3: Fix some nonempty blank lines
      s3: Fix bug 7338, smbget skips leading slash when using a custom outputfile
      s3: Don't attempt to deregister from serverid twice
      s3: Slight reshaping of server_exists_parse
      s3: ALWAYS run make test before checkin ....
      s3: Remove serverid_[de]register_self
      s3: Fix some nested extern warnings
      s3: Fix some type-punned warnings
      s3: Re-initialize the server_id in messaging_reinit
      s3: Pass the new server_id through reinit_after_fork
      s3: Use msg_ctx->id in messaging
      s3: Replace register_message_flags() with serverid_register_msg_flags()
      s3: Remove unused msg_flags from connections.tdb
      s3: Remove an unused variable -- thanks, metze!
      s3: Keep the connections.tdb data format fixed
      s3: Create a unique id for the smbd parent
      s3: Pass procid_self() explicitly to messaging_ctdbd_connection()
      s3:Fix a bogus uninitialized variable warning
      s3: Add msg_ctx to smbd_server_connection
      s3: Add messaging_server_id
      s3: Add missing prototype for smb2_opcode_name
      s3: Add sconn_server_id()
      s3: Remove procid_self() from exit_server_common
      s3: Remove procid_self() from session_claim()
      s3: Remove procid_self() from break_kernel_oplock()
      s3: Remove procid_self() from reply_negprot()
      s3: Remove procid_self() from push_blocking_lock_request_smb2()
      s3: Remove NULL checks from claim_connection()
      s3: Remove procid_self() from claim_connection()
      s3: Remove procid_self() from make_connection_snum()
      s3: Remove procid_self() from init_strict_lock_struct()
      s3: Remove procid_self() from fill_share_mode_entry()
      s3: Remove smbd_messaging_context() from notify_deferred_opens()
      s3: Remove smbd_messaging_context() from close_normal_file()
      s3: Remove smbd_messaging_context() from exit_server_common()
      s3: Remove smbd_messaging_context() from send_break_message()
      s3: Remove smbd_messaging_context() from reply_lockread()
      s3: Remove smbd_messaging_context() from reply_writeunlock()
      s3: Remove smbd_messaging_context() from reply_lock()
      s3: Remove smbd_messaging_context() from reply_unlock()
      s3: Remove smbd_messaging_context() from rename_open_files()
      s3: Remove smbd_messaging_context() from smbd_do_locking()
      s3: Remove smbd_messaging_context() from reply_to_oplock_break_requests()
      s3: Remove smbd_messaging_context() from contend_level2_oplocks_begin_default()
      s3: Remove smbd_messaging_context() from push_blocking_lock_request()
      s3: Remove smbd_messaging_context() from reply_lockingX_error()
      s3: Remove smbd_messaging_context() from process_lockingX()
      s3: Remove smbd_messaging_context() from process_trans2()
      s3: Remove smbd_messaging_context() from blocking_lock_cancel_smb1()
      s3: Remove procid_self() from push_blocking_lock_request()
      s3: Remove procid_self() from generic_blocking_lock_error()
      s3: Remove procid_self() from cancel_pending_lock_requests_by_fid()
      s3: Remove procid_self() from remove_pending_lock_requests_by_mid_smb1()
      s3: Remove procid_self() from process_blocking_lock_queue()
      s3: Remove procid_self() from blocking_lock_cancel_smb1()
      s3: Remove smbd_messaging_context() from linux_oplock_signal_handler()
      s3: Remove smbd_messaging_context() from smb_set_posix_lock()
      s3: Remove procid_self() from irix_oplocks_read_fde_handler()
      s3: Remove smbd_messaging_context() from push_blocking_lock_request_smb2()
      s3: Remove smbd_messaging_context() from remove_pending_lock()
      s3: Remove smbd_messaging_context() from reprocess_blocked_smb2_lock()
      s3: Remove smbd_messaging_context() from make_connection_snum()
      s3: Remove smbd_messaging_context() from shutdown_other_smbds()
      s3: Remove procid_self() from query_lock()
      s3: Remove procid_self() from do_lock()
      s3: Remove procid_self() from do_unlock()
      s3: Remove procid_self() from do_lock_cancel()
      s3: Remove procid_self() from fill_deferred_open_entry()
      s3: Remove procid_self() from remove_pending_lock()
      s3: Remove procid_self() from cancel_pending_lock_requests_by_fid_smb2()
      s3: Remove procid_self() from srv_spoolss_drv_upgrade_printer()
      s3: Remove procid_self() from brl_close_fnum()
      s3: Put serverid_key and serverid_data together
      s3: Remove some type-punned warnings
      s3: Remove procid_self() from ctdb_read_req() and ctdb_handle_message()
      s3: Remove procid_self() from srv_spoolss_reply[open|close]printer()
      s3: Make talloc_attrs() static
      s3: Fix another winbind crash
      s3: Fix a segfault in the RPC server
      s3: Fix another aspect of bug 7262 and make paged results work again
      s3: Slightly simplify make_server_info_pw
      s3: Optimize the write cache for sequential writes
      s3: [ug]id_to_unix_... can not fail
      tsocket: Fix some unreachable code
      s3: Fix crashes in the printing code
      s3: Right now we do not have includes in Makefile.in
      s3: Fix some 64-bit warnings
      s3: Really fix the 64-bit warnings
      Fix a typo
      pam_winbind: Fix shadowing a global on FreeBSD
      s3: Don't use as-needed
      s3: Remove a direct use of procid_self()
      s3: Fix some nonempty blank lines
      s3: Work better without the aio sighandler
      s3: Fix an uninitialized variable
      s3: Actually use the usecs in aio_fork_suspend
      s3-docs: Add more verbose description of "username map cache time".
      s3-docs: Add more verbose description of "ctdb locktime warn threshold".
      s3-docs: Add more verbose description of "log writeable files on exit".
      s3: Avoid pwrite calls for the 1-byte writes with zero content
      s3: Fix two uninitialized variables
      s3: Fix a typo (missing space)
      s3: use dump_data in query FILE_BASIC_UNIX_INFO
      s3: Fix cli_posix_stat
      s3: cli_qpathinfo->cli_qpathinfo1
      s3: Add async cli_qpathinfo
      s3: Convert cli_posix_readlink to cli_qpathinfo_send
      s3: Convert cli_posix_getfacl to cli_qpathinfo_send
      s3: Convert cli_posix_stat to cli_qpathinfo_send
      s3: Factor out parse_ea_blob
      s3: Convert cli_get_ea_list_path to cli_qpathinfo_send
      s3: Remove some unused struct members
      s3: Fix a structure mess-up
      s3: Convert cli_qpathinfo1 to cli_qpathinfo
      s3: cli_qpathinfo2 expects at least 68 bytes
      s3: fix a typo
      s3: Log the correct core path on Linux if core_pattern is set
      s3: Callers of cli_qpathinfo_recv might ignore the output
      s3: Use error status instead of cli_errstr
      s3: Convert cli_qpathinfo2 to cli_qpathinfo_send
      s3: Convert cli_qpathinfo_basic to cli_qpathinfo_send
      s3: Factor out parse_streams_blob
      s3: Convert cli_qpathinfo_streams to cli_qpathinfo_send
      s3: Early start of an async nbench
      s3: Remove a typedef (struct file_info)

Wilco Baan Hofman (43):
      Fix unintentional free of the last value when adding a new value to a key.
      Revert "s4:registry - "util" - remove "const" from "reg_abs_path""
      Remove incorrect const, something that was correct in commit 9c3e6249fd984b823a77cab0514601d2a487920a
      Revert of commit 5b6ad54f43741c0c25b35e44cafe5fed352ff133 in registry.h
      Revert "s4:registry - "util" - make "reg_key_add_abs" consistent with "reg_key_del_abs""
      Revert "s4:registry - adaptions for "add memory contexts for delete value/key functions""
      Revert "s4:registry - util.c - treat unsupported and binary values as the same in the conversion functions"
      Revert "s4:registry - util.c - move the "REG_NONE" case in the conversion functions on top of the switch"
      Revert "s4:registry - util.c - add harder checks for inputs on "reg_val_data_string""
      Revert reordering from commit 51bedf939568717424edd7732e1e315faa333849
      Created net gpo and new libgpo for samba 4. This adds the init function which finds a DC and connects to its LDAP. It also can return information on all group policy objects on a DC.
      Add gPLink and getgpo functionality to net gpo.
      Add gpo list function for listing applicable GPO's for users/machines.
      Add old functionality back which was removed in commit 589a42e2.
      Rename libgpo to lib/policy to avoid confusion with samba3 and add waf build
      Rename files to reflect the libpolicy naming convention. Also fix the GNU make build.
      Add add gPLink function and corresponding net gpo linkadd call.
      Changed add_gplink to set_gplink, so we can change gPLink options as well.
      Implemented delete group policy link function and corresponding feature in net gpo.
      Add getinheritance and setinheritance to net gpo util and library.
      Add fetch function for GPO which fetches all relevant files from the sysvol share.
      Fix error in logic, making recursion work past the first level.
      Optimize the backslash logic in the path traversal.
      Finish net gpo fetch function. Reorder arguments to make them more understandable. Rename getgpo to show.
      Fix mode_t in mkdir.
      Add gpo create functionality. Also fix gPLink handling bugs
      Add preliminary NT ACL support for GPT (GPO on filesystem).
      Fix crash when get_gpo_info returns incorrect data.
      Fix set GPT security descriptor to match windows' behaviour.
      Add net gpo setacl support. Create gp_set_acl function. Show ACL in net gpo show.
      Add ini parser for GPO's.
      Revert "Add old functionality back which was removed in commit 589a42e2."
      Fix net gpo list to use the dsdb with extended DN's. Fixes memberOf group memberships.
      Remove iconv convenience in used functions, which were deleted in commit f9ca9e46ad24036bf00cb361a6cef4b2e7e98d7d
      Add GP ini functions.
      Change talloc_steal to strdup because function might not expect it.
      Fix 'magic' numbers to be strlen(something)
      Set inherit flag type to bool.
      Code cleanups: GUID generation, lp_dnsdomain instead of lp_realm, missing spaces.
      Add talloc_frees in error cases in net_gpo.c
      Fix memory allocation with error handling.
      Refactor policy filesystem code.
      Add preliminary support for storing changed Group Policies.

William Jojo (1):
      s3: Fix bug 7052: "DFS broken on AIX (maybe others)"

Zachary Loafman (1):
      s4 torture: RAW-WRITE should check lockread_supported

Zahari Zahariev (3):
      Comparison tool for LDAP servers (using Ldb)
      v2 Latest enhancements in ldapcmp tool
      DNS objects should not be ignored

olivier (1):
      AIX doesn't have MSG_DONTWAIT


Samba Shared Repository

More information about the samba-cvs mailing list