[SCM] Samba Shared Repository - annotated tag tevent-0-9-11 created

Stefan Metzmacher metze at samba.org
Tue Mar 15 08:22:32 MDT 2011


The annotated tag, tevent-0-9-11 has been created
        at  54ceae71380475276fc0044f38e13a51d7d97b84 (tag)
   tagging  494d497b99df08603555ff6a981482937d44b124 (commit)
  replaces  release-alpha-4-0-0alpha14
 tagged by  Stefan Metzmacher
        on  Tue Mar 15 15:20:32 2011 +0100

- Log -----------------------------------------------------------------
tevent: tag release tevent-0-9-11
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAABAgAGBQJNf3WwAAoJEEeTkWETCEAlBrUH/1CAz6xYRMRXCjWakbiC3IoP
9Cxs+9ldcSlmuCCO1EXq2iLqMlDyynMrUOA+aJ1s28NxWH0ibibDHW8x3mm8+uip
DsM2XeCgb3lEHo2Mcz558eomzavFuZ8PzZY7yildftFr7UorLkYe6w9sd08hC3kg
3YCyGgLjXj1bYDJPdzjrKBWqWUuYuHfSsEqcuplI7JaXxfTnpjZ2iCF7xgle4c5j
cP6QYnxM9PDyRf18ws17RIMbJOYeFqi1AxLKz5Gn2yv8RHuKof3hBlwNUhFRpTKS
XEWPFAn5Zb4CsCYgPokSeCNU0W8yOniBcZQ2QYeP5snXFqDkaSz3Z0P2iFwYz2I=
=XNy6
-----END PGP SIGNATURE-----

Anatoliy Atanasov (5):
      s4/ldapcmp: Fix the parsing of the second set of credentials
      s4/ldapcmp: Check if creds2 is actualy set by the command line
      Revert "s4/ldapcmp: Check if creds2 is actualy set by the command line"
      Revert "s4/ldapcmp: Fix the parsing of the second set of credentials"
      s4/ldapcmp: Correct fix for creds2

Andreas Schneider (149):
      s3-smbd: Call all the rpc services in the right order.
      s3-build: Remove broken RPC modules support.
      s3-smbd: Call the rpc service shutdown functions.
      s3-waf: Fixed the static rpc service build.
      s3-rpcecho: Only register rpcecho in the developer build.
      s3-rpc_client: Added dcerpc_lsa_open_policy.
      s3-rpc_client: Added dcerpc_lsa_open_policy2.
      s3-rpc_client: Added dcerpc_lsa_lookup_sids and dcerpc_lsa_lookup_sids3.
      s3-rpc_client: Added dcerpc_lsa_lookup_names.
      s3-netlogon: Move to new dcerpc client funtions.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupSids3 lookup_options.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupSids3 client_revision.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupNames4 lookup_options.
      s3-rpc_client: Fixed the dcerpc_lsa_LookupNames4 client_revision.
      s3-auth: Fixed account lockout check.
      s3-rpc_client: Fixed return values of dcerpc_lsa_lookup_sids_generic.
      s3-rpc_client: Fixed status check of dcerpc_lsa_lookup_sids_noalloc.
      tdb: Added doxygen documentation.
      s3-smbd: Fixed a possible null pointer dereference.
      s3-param: Fixed code block in max_open_files().
      s3-rpc_client: Added header information to cli_lsarpc.h.
      s3-rpc_client: Added header information to cli_samr.h.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user2.
      s3-rpc_client: Added dcerpc_samr_chng_pswd_auth_crap.
      s3-rpc_client: Added dcerpc_samr_chgpasswd_user3.
      s3-rpc_client: Rename get_query_dispinfo_params.
      s3-rpc_client: Added dcerpc_try_samr_connects.
      s3-lib: Fixed a missing return value in tldap.
      s3-modules: Fixed the for-loop code block.
      s3-utils: Fixed possible resource leak in smbfilter.
      s3-utils: Fixed possible resource leak in smbget.
      s3-utils: Fixed possible resource leak in net_usershare.
      s3-utils: Fixed a resource leak in smbta-util.
      s3-utils: Fixed a resource leak in net_afs.
      librpc: Added support to accept netbios names.
      idl: Added missing endpoint mapper defines.
      s4-selftest: Mark epmapper as knownfail.
      s4-torture: Start with a clean epm_Insert_noreplace test.
      s4-torture: Added test_LookupHandleFree.
      s4-torture: Added a clean test_Lookup_simple.
      s4-torture: Added a clean test_Lookup_terminate_search.
      s4-torture: Added a clean test_Map_simple.
      s4-torture: Comment out the test_InqObject.
      s4-torture: Use binding handle in epm_Delete test.
      s4-torture: Added a test_Insert for epmapper.
      s4-torture: Added a full epm_Map test.
      s4-torture: Reorder the epmapper tests.
      replace: Try to fix broken sys/capabilites.h on Linux.
      s3-epmapper: Added a endpoint mapper skeleton.
      s3-epmapper: Added epm_Insert function.
      s3-epmapper: Added epm_Delete function.
      s3-epmapper: Added epm_Map function from Samba4.
      s3-epmapper: Added arg to match uuid in build_ep_list().
      s3-epmapper: Implemented epm_LookupHandleFree.
      s3-epmapper: Implemented epm_Lookup.
      s3-epmapper: Improved the epm_Map function.
      s3-epmapper: Commented unimplemented functions.
      s3-librpc: Added dcerpc register endpoint functions.
      s3-librpc: Added dcerpc_binding_vector_create function.
      s3-rpc_server: Only allow registering endpoints on priviledged pipes.
      s3-smbd: Added a function to setup rpc services.
      s3-smbd: Disable the endpoint mapper by default.
      s3-selftest: Enable RPC-EPMAPPER tests.
      s3-rpc_client: Added dcerpc_winreg_int_openkey().
      s3-rpc_client: Added winreg query dword helper.
      s3-rpc_client: Added winreg query binary helper.
      s3-rpc_client: Added a winreg set dword helper.
      s3-rpc_client: Added a winreg set sz helper.
      s3-rpc_client: Added a winreg set expand sz helper.
      s3-rpc_client: Added a winreg set multi sz helper.
      s3-rpc_client: Added a winreg query multi sz helper.
      s3-rpc_client: Added a winreg add multi sz helper.
      s3-rpc_client: Added a winreg helper to enum keys.
      s3-rpc_client: Added a winreg query sz helper.
      s3-rpc_client: Added a winreg set binary helper.
      s3-rpc_client: Added a winreg set security descriptor helper.
      s3-rpc_client: Added a winreg query security descriptor helper.
      s3-rpc_server: Migrated eventlog to winreg.
      s3-rpc_server: Added a winreg based eventlog registry init.
      s3-util: Moved eventlog_add_source to admin util.
      s3-smbd: Init the eventlog registry on service startup.
      s3-registry: Remove obsolete reg_eventlog.
      s3-services: Migrated svcctl registry functions to winreg.
      s3-rpc_server: Added a svcctl shutdown function.
      s3-rpc_server: Added a winreg based svcctl registry init.
      s3-smbd: Init the svcctl registry keys on service startup.
      s3-services: Remove obsolete services_db.c.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_enum_keys.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_sz..
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_dword.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_X.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_X.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_query_dword.
      s3-rpc_server: Migrated spoolss to dcerpc_winreg_set_multi_sz.
      s3-perfcount: Create the directory on tdb open.
      s3: Added missing files in .gitignore.
      s3: Added file for clang complete support in vim.
      s3-rpc_server: Fixed possible segfault with client_id.
      s3-rpc_server: We need a messaging context for rpc.
      s3-rpc_server: Fixed possible segfaults in svcctl server.
      s3-rpc_client: Fixed winreg int documentation.
      s3-rpc_client: Added dcerpc_winreg_int_openkey() which dectects the hive.
      s3-rpc_client: Fixed an uninitialized variable.
      s3-librpc: Only register NCACN_NP.
      s3-rpc_server: Rename named_pipe_read_packet().
      s3-rpc_server: Create a common ncacn listen state.
      s3-rpc_server: Pass tevent_context to dcerpc endpoints.
      s3-rpc_server: Rename srv_rpc_register.
      s3-rpc_server: Rename srv_rpc_register.c.
      s3-rpc_server: Added function to setup tcpip listener!
      s3-rpc_server: Added port option to _rpc_ep_register.
      s3-rpc_server: Added event and msg ctx to _rpc_ep_register.
      s3-rpc_server: Let enpoint mapper listen on port 135.
      s3-rpc_client: Move client pipe functions to own header.
      s3-smbd: Pass tevent context to messaging functions.
      s3-librpc: Added tcpip support for dcerpc_binding_vector_create.
      s3-librpc: Free memory we don't need.
      s3-rpc_server: Added tcpip listener for each rpc service.
      s3-rpc_server: Set client and server connection info.
      s3-rpc_server: Added server address to pipes struct.
      s3-epmap: Return the correct ip address.
      s3-rpc_server: Added prototype to setup a ncalrpc socket.
      s3-rpc_client: Added DCERPC_AUTH_TYPE_NCALRPC bind.
      selftest: Added ncalrpc dir to config.
      s3-librpc: Register endpoints using ncalrpc.
      s3-rpc_server: Created an Endpoint Mapper Daemon.
      s3-rpc_server: Start the Endpoint Mapper Dameon if enabled.
      s3-rpc_server: Introduce transport in pipe_struct.
      s3-rpc_server: Only allow epm insert and delete on NCALRPC.
      s3-rpc_server: Fixed ncalrpc connection accept.
      s3-rpc_server: Remove unneeded ncacn wrappers.
      s3-rpc_server: Improved the dcerpc_ncacn_accept switch.
      s3-rpc_server: Add server support for NCALRPC system user pipe.
      s3-rpc_server: Create the ncalrpc endpoints.
      s3-librpc: Register NCALRPC pipes.
      s3-rpc_server: Fixed the accept() for named_pipe_listener.
      s3-rpc_server: Fixed the accept() for tcpip_listener.
      s3-rpc_server: Fixed the accept() for ncalrpc_listener.
      s3-winbind: Fixed the accept() for new_connection.
      s3-rpc_server: Free unused memory.
      s3-rpc_server: Added IPv6 support for epmapper.
      tevent: Fixed tevent_wakeup_send code example.
      s3-smbd: Increase debug level von context messages.
      s3-rpc_client: Don't ask endpoint mapper for its own port.
      s3-rpc_server: Change irritating debug message.
      s3-rpc_server: Add tevent based endpoint setup functions.
      s3-rpc_server: Use the new endpoint register functions.
      s3-rpc_server: Remove unused _rpc_ep_register.

Andrew Bartlett (103):
      s4-heimdal_build Remove talloc dependency from hdb-glue.c
      s4-heimdal_build Remove talloc dep for krb5-glue.c
      nsswitch Add talloc depencency for nsstest
      s4-ldap_server Allow multiple binds on LDAP server
      s4-dsdb Implement tokenGroups expansion directly in ldb operational module
      s4-auth use new dsdb_expand_nested_groups()
      s4-auth Add function to obtain any user's session_info from a given LDB
      s4-auth Add get and set methods for auth_session_info python wrapper
      pyldb Simplify python wrappers for struct ldb_val (LdbValue)
      libcli/security Add python bindings for se_access_check
      s4-samba_tool Added ACL checking to python GPO management tool
      s4-gensec Don't steal the auth_context, reference it.
      s4-pyauth Use py_talloc_get_type() for greater talloc binding safety
      s4-pyauth Add bindings for auth_context_create() as AuthContext()
      s4-pygensec Add bindings for server_start() and update()
      s4-pyldb Fix tp_basicsize for PyLdbDn
      s4-torture Remove unused temp dirs from the RPC-PAC test.
      s4-pygensec Fix indentation of py_gensec_start_mech_by_name()
      s4-auth Extend python bindings to allow ldb and message to be specified
      s4-gensec Extend python bindings for GENSEC and the associated test
      s4-gensec Remove special case 'for SASL' that is not required any more.
      s4-dsdb Add a test of the tokenGroups behaviour on the user's DN.
      s4-auth Allow NULL methods to be specified to auth_context_create_methods()
      s4-pyauth Fix AuthContext wrapper
      s4-dsdb Add PAC validation test to tokengroups test.
      s4-dsdb Don't use None as the input to the GENSEC loop in tokengroups test
      s4-selftest Remove knownfail for tokengroups test
      libcli/auth move ntlmssp_wrap() and ntlmssp_unwrap() into common code.
      s4-gensec Add prototype for gensec_ntlmssp_init()
      s4-auth Remove special case for account_sid from auth_serversupplied_info
      s4:heimdal: import lorikeet-heimdal-201101310455 (commit aa88eb1a05c4985cc23fb65fc1bad75bdce01c1f)
      Remove unused installmisc.sh script, from old build system
      s4-python Remove unused missing.py (used by old build system)
      waf: Replace python installation rule to allow PYTHONARCHDIR and PYTHONDIR
      s4-python Ensure we add the Samba python path first.
      s4-python Remove manipuation of python path from samba module
      s4-waf Don't install any Samba packages into PYTHONDIR
      wintest Return debug info when dcpromo fails from the log
      s4-dsdb Fix generation of rootDSE domainControllerFunctionality
      s4-dsdb Add tests to ensure we don't break the rootDSE function levels again
      s4-waf Don't include ../librpc in paths
      s4-provision Remove setup_path, setup_dir and find_setup_dir
      s4-waf Add PYTHONDIR and PYTHONARCHDIR to the 'different on install' list
      s4-python Don't force "bin" into the python sys.path
      s4-wintest Use top level build for wintest
      s4-auth Add auth.idl to encode auth subsystem structures in IDL
      s4-auth Rework auth subsystem to remove struct auth_serversupplied_info
      s4-selftest Fix valgrind and gdb options for top level build
      s4-auth Fix setting of bad_password_count in auth_convert_user_info_dc_sambaseinfo()
      s4-waf Remove source4 build system.
      waf Remove debugging hacks left in the top level build
      auth Move auth_sam_reply into the top level.
      libcli/named_pipe_auth Remove support for unused levels 0-2.
      auth.idl fix size_is() reference in IDL
      libcli/named_pipe_auth Change from 'info3' to auth_session_info_transport
      s3-auth Rename cryptic 'ptok' to security_token
      s3-auth Remove unused pam_handle
      waf Fix dependencies for .pc (pkg-config) files
      s3-auth Fix memory leak in security=share and force user =
      wintest upper case the --vms paramter arguments to wintest.py
      Add support for testing a Win2k3 domain member
      heimdal Pass F_CANON down to the hdb layer for servers in AS-REP as well
      s3-cluster Always fill in the clustering vnn element
      s3-cluster remove more CLUSTER_SUPPORT #ifdef stuff
      lib/util/charset add functions isupper_m and islower_m
      lib/util/charset use a path to dynconfig.h that works in s3 and s4
      lib/util/charset split codepoints.c into it's own subsystem
      lib/util/charset use get_dyn_CODEPAGEDIR(), which is in common
      lib/util Make UTIL_LDB conditional on an s4 build
      s3-waf use lib/util/wscript_build, and avoid duplicate subsystems
      s3-libads Remove MIT-specific krb5_princ_realm macro calls.
      charset Remove use of {isupper,islower,toupper,tolower}_w functions
      librpc push NDR_SECURITY and NDR_DCERPC to the top level wscript files
      librpc make ndr-standard a common library
      lib/util/charset Use top level iconv.c in source3
      lib/util Remove #if _SAMBA_BUILD_ == 4 that isn't required any more
      s3-charcnv Don't genreate valid_table on the fly, rely on valid.dat
      lib/util/charcnv Move iconv handle setup in common
      lib/util/charset Add back setlocale(), but only when called from binaries
      Add tests for various s3 auth modes
      s3-tests use $PREFIX to ensure tests don't work outside the test area
      selftest move selftesthelpers to a top level helper script
      selftest split $PERL into multiple arguments for Test::More check
      s3-selftest convert tests.sh to python
      smbtorture Remove random file name before we start RW2
      selftest pass in srcdir into Samba3 target module
      selftest: Improve gdb_backtrace to run in batch mode
      s3-auth Rename auth_serversupplied_info varaiables: server_info -> session_info
      s4-auth Move libcli/security/session.c to the top level
      selftest the raw.mux test is flaky:
      heimdal_build omit #line statments to allow valgrind to work again
      lib/util/time: Merge time functions from source3/lib/time.c
      s3-build __FUNCTION__ is always available, always use it
      s3-debug Always use C99 true/false rather than True and False
      lib/util move debug.[ch] out of the way
      lib/util: new merged debug system
      s3-rpc_server Handle session key as a constant buffer
      pidl Add support for uid_t and gid_t types
      librpc/idl Add helper structures for use by samba3 in auth_session_info
      s3-auth struct security_unix_token replaces UNIX_USER_TOKEN
      libcli/security Add unix_token and unix_info to auth_session_info too
      s4-dsdb: Ensure we permit multi-valued backlinks on single-valued attributes
      librpc/ndr use hyper for uid_t/gid_t rather than udlong

Andrew Tridgell (170):
      talloc: added a test for the use after free Rusty found
      talloc: fixed a use after free error
      waf: ensure "make dist" works from a clean git tree for all libraries
      s4: fixed 'make dist' not to need configure for s4
      autobuild: added "make distcheck" for our libs
      script: added librelease.sh script
      script: tag the releases
      ldb: link to the download directory on the website
      abi: force TERM=none in abi generation
      ldb: added ldb_dn_get_extended_comp_num()
      s4-dsdb: validate number of extended components
      s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONE
      ldb: added ldb_dn_minimise()
      s4-dsdb: minimise the DN in group expansion
      s4-samba-tool: fixed the gpo command to use the right DN for access checks
      s4-auth: fixed status return
      s4-samdb: give a more useful debug when we can't open the privileges db
      s4-test: added a tokengroups test
      s4-kdc: don't ask for an extended DN for krbtgt_dn
      ldb: new ABI file for 0.9.23
      s4-dsdb: fixed filtering of tokengroups
      s4-dsdb: fixed primaryGroupID to use dsdb_module_search_dn()
      s4-dsdb: replaced another use of samdb_search in a ldb module
      s4-dsdb: removed some more samdb_search_*() calls from samldb.c
      s4-dsdb: removed the last use of samdb_search_*() from the dsdb ldb modules
      s4-dsdb: only enforce the extended dn rules over ldap
      waf: new version of waf
      waf: use PYTHONARCHDIR for installing python shared libs
      waf: this script does need bash
      ldb: added ldb_req_mark_trusted()
      s4-dsdb: pass parent request to dsdb_module_*() functions
      s4-dsdb: replaced the calls to ldb_search() in dsdb modules with dsdb_module_search()
      ldb: new ABI sigs file
      pygensec: remove special case handling for None for buffers
      waf: change private libraries to use the same soname as public libraries
      charcnv: removed call to setlocale() (bug 7519)
      waf: samba deps generation depends on EXTRA_INCLUDES
      pidl: support using pidl from top level directory
      s4-heimdal: allow heimdal build scripts to work from top level
      s4-idl: make the source4 idl build independent of build directory
      waf: added top level build rules
      s4-provision: cope with top level directory for provision
      s4-test: allow make test to work from top level directory
      blackbox: removed assumption of build directory
      s4-test: fixed more assumptions of ./setup for setup directory
      s4-loadparm: removed "setup directory" option
      s4-dynconfig: fixed dyn_SETUPDIR to point to the right directory
      s4-test: fixed test_samba4.pl for top level build
      s4-test: fixed setup/ assumption for top level build
      s4-test: fixed hard coded test paths for top level build
      build: added configure.developer for top level build
      build: added placeholder to ensure include/ is available in build dir
      s4-test: fixed ndrdump test for top level build
      s4-test: fixed samba4.policy.python test for top level build
      build: fixed top level etags and ctags target
      s4-provision: removed spurious os.chdir() from upgradehelpers.py
      build: fixed make install for top level build
      s4-dsdb: make subtree_rename errors clearer
      s4-upgradeprovision: renames need a relax to avoid subtree_rename checks
      s4-build: fixed install of version.h from source4 build
      s4-python: get ordering right on python paths
      autobuild: decouple build directories from target names
      autobuild: add a bit more debug info in autobuild
      autobuild: fixed clone source for build trees
      s4-provision: added setup_path() import in two more places
      s4-charset: use dyn_CODEPAGEDIR for location of upcase.dat/lowcase.dat
      s4-build: remove a bunch of unused build scripts
      s3-torture: switch source3 to using top level samba4 build for smbtorture
      autobuild: lib/replace doesn't need autogen.sh
      build: fixed error message for incorrect waf version
      build: removed the old autogen.sh and autogen-waf.sh scripts
      build: removed unused build scripts
      s4-build: fixed uses of os.path.relpath()
      ldb: added a include/ldb_version.h
      ldb: fixed two warnings in the ldb_ldap backend
      ldb: change version number to 1.0.0
      ldb: added ldb 1.0.0 ABI signatures
      s4-krb5: authkrb5 should depend on ldb
      ldb: use #include <ldb.h> for ldb
      s4-torture: not having an output dir is not a fatal error
      s4-auth: install gen_ndr/auth.h, used by public session.h
      s4-build: need EXPAND_VARIABLES() for terminal in make test
      s4-build: fixed export of krb5pac.h, needed by other public headers
      script: sign library releases with Samba Library Distribution Key
      ldb-web: update mailing list info
      s4-ldb: use a helper function for single valued checking
      s4-ldb: added LDB_FLAG_INTERNAL_FORCE_SINGLE_VALUE_CHECK
      s4-dsdb: fixed problem with constrained modification of description attribute
      s4-dsdb: cleanups to the backupkey RPC server
      s4-ldb: fixed a uninitialised el->flags in ldb_tdb
      s4-dsdb: cope with broken exchange schema with single valued backlinks
      idl: naming a structure 'VERSION' is not a good idea!
      s3-waf: move the KRB5_DEPRECATED configure check out of lib/replace
      s4-build: added LOCALEDIR config option
      waf: use Utils.WafError() instead of sys.exit(1)
      waf: added subdir= option in SAMBA_*() rules
      s3-build: allow waf build of s3 IDL files from any top directory
      waf: library_flags() doesn't only operate on conf objects
      build: make ADD_LDFLAGS() returns the flags that were added
      build: added allow_undefined_symbols options for libraries and modules
      build: added subdir option for module building
      build: fixed passing of includes= for modules
      uid-wrapper: handle uwrap_enabled() as a macro
      s3-includes: force _SAMBA_BUILD_=3 in source3 includes.h
      s4-dsdb: operational module does not need auth any more
      s3build: added NMBDSOCKETDIR to dynconfig
      build: remember the flags used for undefined variable errors
      s4-auth: rename 'auth' subsystem to 'auth4'
      waf: give a more sensible error on symlink_bin with missing directory
      waf: added SAMBA3_*() build rules to samba3.py
      charset: allow s3 waf build to use lib/util/charset
      s3-waf: fixed the include paths for samba public libraries
      waf: support building libraries with a directory prefix
      waf: improved error message for bad paths in SAMBA_LIBRARY()
      libutil: make waf rules usable by s3 waf build
      s4-util: removed the valgrind_strlen() routine
      build: put links for libs in the right directory
      s3-waf: use SAMBA3_*() build rules in source3/build
      nsswitch: depend on dl
      s4-idl: rename s4 server_id.idl to server_id4.idl
      s4-ndr: added NDR_WBINT to ndr_tables
      libcli/nbt: allow use of the waf build for nbt in source3
      s3-waf: added a krb5 dependency
      s3-waf: rename POPT_SAMBA to POPT_SAMBA3
      s3-waf: renamed tdb-wrap to tdb-wrap3
      s3-waf: rename 'errors' to 'errors3'
      s3-waf: use common libcli/nbt build rules
      s3-waf: renamed samba-util to samba-util3
      s3-waf: added some more krb5 dependencies
      s3-waf: cope with location of include.h for toplevel build
      s3-waf: make version and build directory conditional
      s3-waf: LIBADS depends on krb5
      s3-waf: use bld.env.suffix3 for differentiating toplevel build
      s3-waf: rename CHARSET to CHARSET3
      s3-waf: find swat files for both toplevel and source3 build
      s3-waf: cope with both toplevel and source3 build
      s3build: recurse into source3/
      s3-waf: make pieces of the source3 waf wscript depends on toplevel_build
      s3-waf: use Logs.warn() not print for configure warnings
      s3-waf: added support for in-tree heimdal in source3 waf build
      s3build: use source3/wscript for s3 configure rules
      s3-waf: work around broken cups-config --libs output
      s4-waf: rename 'param' to 'pyparam'
      s3-waf: convert some subsystems into private libraries
      s4-waf: rename smbpasswd library to smbpasswdparser
      s3-waf: no need to add suffix3 to smbpasswd
      build: we don't need the special case for s3build any more
      s3-waf: build bin/smbclient3 for top level build
      s4-waf: added --enable-s3build configure option
      s4-waf: fixed make test for toplevel
      python: use os.environ[] instead of os.putenv()
      build: enhanced the symbolcheck code
      build: added WHYNEEDED=TARGET:DEPENDENCY
      build: created samba-util-common library
      build: moved more files into samba-util-common
      build: move idtree.c into samba-util-common
      s3-waf: added SYMBOLCHECK support to source3 waf build
      build: duplicate symbols between system libraries aren't interesting
      build: don't display expected duplicate symbols
      build: fixed 'make dist' without configuring
      build: moved libcli/auth/ntlmssp*.c into a common libcliauth.so library
      build: moved schannel_sign.c into a shared COMMON_SCHANNEL subsystem
      build: moved libds/common/flag_mapping.c into a common subsystem
      build: moved lmhosts.c into a common subsystem
      build: moved librpc/rpc/*.c into a rpccommon library
      build: moved spnego_parse.c into a common subsystem
      build: moved util_reg.c into a common subsystem
      autobuild: enabled samba3-waf build
      build: fixed the ELF name for private libraries
      debug: fixed a valgrind error

Björn Baumbach (10):
      s3-nmbd: Fix bug #7875
      s3-rpcclient: Fix bug #7880: cmd_spoolss_deletedriver() returned without checking all architectures.
      s3-docs: Typos in smbclient man page
      s3-docs: Typos in rpcclient man page
      s3-docs: add some long opts to smbclient(1) man
      s3-docs: fix deldriver option
      s3-torture: Fix cli_errstr() usage (part of bug #7864)
      s3-smbclient: Fix cli_errstr() usage (part of bug #7864)
      s3-masktest: Fix cli_errstr() usage (part of bug #7864)
      s3-smbclient: Fix cli_errstr() usage (part of bug #7864)

Björn Jacke (3):
      examples/LDAP: delete unmaintained samba-schema-netscapeds4.x
      examples/LDAP: remove overoutdated samba-schema.IBMSecureWay
      Revert "examples/LDAP: remove overoutdated samba-schema.IBMSecureWay"

Brad Hards (7):
      Typo fix in KDC parameters.
      talloc: Fix warnings in test code
      s4:ldb: Add prototype header.
      s4:ldb: Make sample module implementation static.
      s4:dynconfig: Add prototypes to match dynconfig.c
      talloc: Typo fix for api docs
      dynconfig: Add extern to header, try to unbreak imini buildfarm host.

Christian Ambach (11):
      s3:vfs fix children cleanup in aio_fork
      s3:vfs aio_fork children do not go away
      s3:registry correct a debug level
      s3:utils enable sharesec for registry shares
      nsswitch: fix a segfault in the krb5 locator plugin
      s3:vfs:syncops add option to disable metasync per share
      s4:smbtorture do not leave output directory around
      s3:idmap:autorid prevent fatal configuration changes
      s3:libsmb only log a dead connection if it was not closed
      s3: Survive an idle child that was killed
      s4:waf-build fix disable-shared build for smbtorture

David Disseldorp (13):
      s3-printing: reload shares after pcap cache fill
      s3-printing: Initiate pcap reload from parent smbd
      s3-printing: remove old entries in pcap_cache_replace
      s3-printing: remove printer_list_need_refresh
      Looking into printer driver issues, I ran across some peculiarities in
      s3: increase the log level for missing PIDs on SIGCHLD
      s3-printing: fix move_driver_to_download_area() error paths
      s3-printing: clean up get_correct_cversion error paths
      s3-printing: vfs_connect prior to driver/dfs IO
      s3-printing: follow force user/group for driver IO
      s3-printing: remove unneeded local_pcap_copy global
      s3-printing: fix cups pcap reload with no printers
      s3: add two missing vfs disconnect calls

Gregor Beck (15):
      s3-net: add roundtrip tests for registry import/export
      s3:net: remove unused net_idmap_help
      s3:net add option --db
      s3:net idmap restore: fix segfault on missing input file
      s3:net factor out net_idmap_dbfile
      s3:net idmap dump: use net_idmap_dbfile
      s3:net idmap: implement net idmap delete
      s3: add functions to flush the idmap memcache
      s3: add functions to remove entries from idmap memcache
      s3: add functions to remove entries from idmap cache
      s3: smbcontrol to notify smbd about idmap changes
      s3: remove superfluous debug messages from msg_idmap
      s3: adjust loglevel for idmap_cache
      s3-docs: manpage for "smbcontrol xx idmap"
      s3-docs: manpage for "net idmap delete"

Günther Deschner (387):
      s3-waf: fix the build.
      s4-smbtorture: add more tests for driver_dates.
      s4-smbtorture: fix DriverDate and DriverVersion comparison checks against w2k3.
      s4-smbtorture: setup help and dependent files in spoolss driver unc path tests.
      s4-smbtorture: in test_GetDriverInfo_winreg() always test level 6 for samba3 as
      s4-smbtorture: always setup full driver level 8 in test_add_driver_arg().
      s4-smbtorture: check driver_version equality as well.
      s3-waf: add UTIL_TDB subsystem.
      s3-waf: convert PASSCHANGE into a subsystem.
      s3-waf: convert SAMBA_VERSION into a subsystem.
      s3-rpcclient: use dcerpc_dfs_X functions.
      s3-build: no need to compile librpc/gen_ndr/cli_dfs.c anymore.
      s3-waf: no need to compile librpc/gen_ndr/cli_dfs.c anymore.
      lib/addns: move DNS client library to the main directory.
      s3-net: Fix bug #7690: retry DNS updates when connection to one nameserver has failed.
      s3-waf: make the --with-Xdir options work more like in the classic build.
      s3-waf: fix winbind_krb5_locator.so realname.
      s3-waf: recurse into ../lib/smbconf.
      s3-waf: cleanup wscript_build a little.
      s3-waf: rearrange waf recurses in main wscript_build.
      s3-waf: rename LIBCLI_NETLOGON subsystem to LIBRPCCLI_NETLOGON.
      netlogon: move netlogon helpers to ../libcli/netlogon.
      s3-build: fix classic build after libcli netlogon changes.
      s3-waf: add NMBDSOCKETDIR variable.
      libcli/security: fix sid_type_lookup().
      s3-selftest: re-sync with s4-selftest wscript.
      s3-wkssvc: prefer dcerpc_wkssvc_X functions.
      s3-waf: remove RPCCLI_WKSSVC subsystem.
      s3-build: remove RPCCLI_WKSSVC subsystem.
      s3-eventlog: prefer dcerpc_eventlog_X functions.
      s3-waf: remove RPCCLI_EVENTLOG subsystem.
      s3-build: remove RPCCLI_EVENTLOG subsystem.
      s3-initshutdown: prefer dcerpc_initshutdown_X functions.
      s3-waf: remove RPCCLI_INITSHUTDOWN subsystem.
      s3-build: remove RPCCLI_INITSHUTDOWN subsystem.
      s3-drsuapi: prefer dcerpc_drsuapi_X functions.
      s3-waf: remove RPCCLI_DRSUAPI subsystem.
      s3-build: remove RPCCLI_DRSUAPI subsystem.
      s3-waf: add checks for fallocate fallocate64.
      s3-waf: more fallocate checks stolen from autoconf.
      s3-waf: add checks for Linux readahead.
      s3-waf: add check for SO_PEERCRED.
      s3-waf: finally enable large file support.
      s3-libnetapi: add missing error check after switchting to dcerpc_wkssvc_X functions.
      s3-drsuapi: fix error handling after converting to dcerpc_drsuapi_X functions.
      s3-net: add missing breaks in switch statement in get_share_info().
      s3-net: fix query_service_state() error handling.
      s3-svcctl: prefer dcerpc_svcctl_X functions.
      s3-waf: remove RPCCLI_SVCCTL subsystem.
      s3-build: remove RPCCLI_SVCCTL subsystem.
      s3-net: restructure "net rpc service" and add open_service().
      s3-net: restructure "net rpc service" and add open_scm().
      s3-net: remove some pointless fstrings in "net rpc service".
      s3-libnetapi: prefer dcerpc_netr_X functions.
      s3-libnet: prefer dcerpc_netr_X functions.
      s3-net: prefer dcerpc_netr_X functions.
      s3-rpc_client: prefer dcerpc_netr_X functions.
      s3-winbind: prefer dcerpc_netr_X functions.
      s3-rpcclient: prefer dcerpc_netr_X functions.
      s3-waf: remove RPCCLI_NETLOGON subsystem.
      s3-build: remove RPCCLI_NETLOGON subsystem.
      s3-libnetapi: prefer dcerpc_srvsvc_X functions.
      s3-smbclient: prefer dcerpc_srvsvc_X functions.
      s3-libsmbclient: prefer dcerpc_srvsvc_X functions.
      s3-lanman: prefer dcerpc_srvsvc_X functions.
      s3-smbtree: prefer dcerpc_srvsvc_X functions.
      s3-net: prefer dcerpc_srvsvc_X functions.
      s3-rpcclient: prefer dcerpc_srvsvc_X functions.
      s3-waf: remove RPCCLI_SRVSVC subsystem.
      s3-build: remove RPCCLI_SRVSVC subsystem.
      s3-rpcclient: prefer dcerpc_winreg_X functions.
      s3-spoolss: no need to include cli_winreg header anymore.
      s3-net: prefer dcerpc_winreg_X functions.
      s3-net_registry: prefer dcerpc_winreg_X functions.
      s3-waf: remove RPCCLI_WINREG subsystem.
      s3-build: remove RPCCLI_WINREG subsystem.
      s3-waf: fix the build after rpc_winreg removal.
      s3-net: use correct spoolss header in net_ads.c.
      s3-net: use correct spoolss header in net rpc.
      s3-netlogon: no need to include ../librpc/gen_ndr/cli_samr.h anymore.
      s3-netlogon: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.
      s3-rpc_client: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.
      s3-winbind: no need to include ../librpc/gen_ndr/cli_lsa.h in
      s4-smbtorture: add some paranoia checks for 0 sized devmodes.
      s4-smbtorture: prepare devicemode test for expected result tests.
      s4-smbtorture: add tests for the size member of spoolss devicemodes.
      s3-spoolss: disallow storing an invalid devmode size.
      s4-smbtorture: make sure there is always driverextra data in spoolss devmode size tests.
      s3-spoolss: as smbtorture testing proves: devmode size is the size of the devicemode minus the driverdata extra size.
      s3-rpcclient: rename duplicate enumkey command to winreg_enumkey.
      s3-spoolss: make it more obvious what winreg_create_printer() does.
      s3-lanman: remove trailing whitespace.
      s3-rpc_client: prefer dcerpc_spoolss_X functions.
      s3-rpcclient: prefer dcerpc_spoolss_X functions.
      s3-build: remove RPCCLI_SPOOLSS subsystem.
      s3-waf: remove RPCCLI_SPOOLSS subsystem.
      s3-rpc_client: fix uninitialized variable found by -O3.
      s3-rpc_client: no need to include gen_ndr/cli_samr.h anymore.
      s3-rpc_client: fix dcerpc_try_samr_connects().
      s3-torture: fix uninitialized status code.
      s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains.
      s3-waf: no need anymore to include "source4" globally.
      s3-waf: fix lib/addns include path.
      s3-rpcclient: allow to define validation level for samlogon.
      s3-build: remove source4 include path for autoconf build as well.
      s3-waf: add PKGCONFIGDIR.
      libndr: move ndr_print_bool to ndr_basic.c
      waf: share libndr.so between samba3 and samba4.
      s3-libndr: remove cmdline_lp_ctx.
      idl: add file_id idl.
      Revert "s3-winbind: fix winbindd_dual_pam_auth_samlogon() for NT4 domains."
      Revert "s3: These assignments are overwritten immediately"
      s3-winbind: share a common winbind_samlogon_retry_loop().
      s3-build: remove another leftover of -I../source4.
      s3-rpc_client: remove some more obsolete cli_X.h header files.
      s4-smbtorture: add NDR tests for netr_LogonSamLogon.
      s4-smbtorture: add (disabled) ndr torture test to check for a w2k samlogon reply we can't currently parse.
      s3-rpcclient: use struct based dcerpc_spoolss_EnumPrinterData_r() call.
      s3-net: use struct based dcerpc_spoolss_EnumPrinterData_r() call.
      s3-waf: these libs are not private libs.
      nsswitch: libwbclient has vnum 1 now.
      s3-waf: On FreeBSD, compile zfsacl if sunacl.h is around.
      s4-smbtorture: make it more obvious this are w2k dumps in netlogon ndr test.
      s4-smbtorture: add samr_changepassworduser3 ndr torture tests.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/group.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/localgroup.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/samr.c.
      s3-libnetapi: prefer dcerpc_samr_X functions in lib/netapi/user.c.
      s3-libnet: prefer dcerpc_samr_X functions.
      s3-rpcclient: prefer dcerpc_samr_X functions.
      s3-lanman: prefer dcerpc_samr_X functions.
      s3-net: add net_scan_dc non-ad variant.
      s3-waf: fix the build after linux netlink changes.
      s3-net: prefer dcerpc_samr_X functions in net_rpc_sh_acct.c.
      s3-net: prefer dcerpc_samr_X functions in rpc_info_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_handle_user.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_show_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_str_edit_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_sh_user_flag_edit_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_delete_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_add_groupmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_add_aliasmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_del_groupmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_del_aliasmem.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_list_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_list_group_members.
      s3-net: prefer dcerpc_samr_X functions in rpc_list_alias_members.
      s3-net: prefer dcerpc_samr_X functions in rpc_group_members_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_fetch_domain_aliases.
      s3-net: prefer dcerpc_samr_X functions in rpc_aliaslist_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_add_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_del_internals.
      s3-net: prefer dcerpc_samr_X functions in rpc_trustdom_list.
      s3-winbind: use status variable name in cm_connect_sam.
      s3-winbind: prefer dcerpc_samr_X functions in cm_connect_sam.
      s3-winbind: prefer dcerpc_samr_X functions in invalidate_cm_connection.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_samr.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_rpc.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_pam.c.
      s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_msrpc.c.
      nsswitch: remove unused code from wbinfo.c
      s3: Remove superfluous ;
      s3-dssync-passdb: add basic routines and net function.
      s3-dssync-passdb: fill in passdb_startup.
      s3-dssync-passdb: fill in passdb_finish.
      s3-dssync-passdb: fill in passdb_process_objects
      s3-waf: fix the build after epmapper changes.
      s3-waf: fix the build after libnet changes.
      s3-net: use status variable in net_rpc_join_newstyle.
      s3-net: prefer dcerpc_samr_X functions in net_rpc_join_newstyle.
      s3-build: remove RPCCLI_SAMR subsytem.
      s3-waf: remove RPCCLI_SAMR subsystem.
      s3-libnetapi: prefer dcerpc_lsa_X functions.
      s3-libnet: prefer dcerpc_lsa_X functions.
      s3-libsmb: prefer dcerpc_lsa_X functions.
      s3-rpcclient: use status variable.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-rpcclient: prefer dcerpc_lsa_X functions.
      s3-net: use status variable in "net rpc audit".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc audit".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc join".
      s3-net: prefer dcerpc_lsa_X functions in net_util.c
      s3-net: use status variable in "net rpc rights".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc rights".
      s3-net: prefer dcerpc_lsa_X functions in "net rpc".
      s3-epmap: use correct dcerpc client header in dcerpc_ep.c
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbind_cm.c
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbindd_samr.c.
      s3-winbind: prefer dcerpc_lsa_X functions in winbindd/winbindd_rpc.c.
      s3-build: remove RPCCLI_LSA subsystem.
      s3-waf: remove RPCCLI_LSA subsystem.
      s3-build: remove --samba3-ndr-client from build_idl.sh script.
      s3-waf: no need to call pidl with --samba3-ndr-client anymore.
      s3-auth: add copy_netr_SamBaseInfo().
      s3-winbindd: let winbind try to use samlogon validation level 6. (bug #7945)
      s3-waf: add support for iprint.
      s3-waf: recurse into ../lib/util/wscript_configure
      s3-netlogon: fix typo.
      s3-waf: add --with-syslog option.
      s3-waf: only build auth_netlogond in developer build.
      s3-waf: add support for --with-aio-support.
      s3-waf: fix the build after winreg and rpc services changes.
      s3-waf: fix wrong check for vfs_aio_fork dependencies.
      waf: add clock_gettime clock ID checks to libreplace wscript.
      s3-waf: add --with-automount option.
      ndr: merge duplicate ndr_map_error2ntstatus() functions.
      ndr: move null_ndr_syntax_id to the common libndr location.
      ndr: merge ndr_map_error2string and ndr_errstr.
      libndr: share some uuid helpers.
      pam: share pam errors in a common location.
      libndr: apply some const and make is_valid_policy_hnd a callback to policy_handle_empty.
      lib/compression: add shared wscript_build.
      s4-waf: split out wscript_build for ndrdump binary.
      s4-smbtorture: also run the driver timestamp spoolss test against samba.
      s3-selftest: mark the driver timestamp test as knownfail for now.
      s4-smbtorture: add torture test to check proper add and delete driver operations.
      s3-spoolss: Dont wipe out all drivers when only one should be deleted.
      waf: bring back shared Makefile and configure (needed by s3-waf).
      s3-selftest: let valgrindtest use the new make test.
      selftest: remove make oldtest.
      s3-waf: support non-default krb5-config and cups-config locations.
      s3-waf: check k5crypto in some more locations.
      s3-waf: as long as we dont have --with-featureX=yes|no|auto handling, avoid exiting.
      s3-waf: we check for attr in ../lib/util/script already, so we cannot set to EMPTY here.
      s3-waf: make sure we dont activate dnsupdate support w/o gssapi.
      s3: remove unused struct uuid_flat.
      s3: move some stuff out of smb.h to better locations.
      s3-waf: make ads support detection a little more robust.
      s3: give ../librpc/ndr/util.c its own header.
      s3-waf: fix krb5 checks logic.
      s3-waf: fix the build after auth changes.
      librpc: move preg.idl to main directory.
      socket_wrapper: avoid c++ style comments.
      s3-oldtest: remove unused tests_all.sh file.
      s3-system: fix malloc/talloc mismatch in sys_popen().
      s3-waf: better checks for gssapi support.
      s3-waf: fix cups checks when lib is there but headers aren't.
      s3-waf: do not make pam support mandatory.
      s3-rpc_server: move services into individual directories.
      s3-waf: dont try to redefine 'pam', we checked above...
      s3-selftest: run the three net tests individually.
      s3-waf: try to fix the {net|free|open}bsd build.
      s3-selftest: remove some more unused test functions.
      s3-waf: try to deal with system w/o ldap; also move module processing to the end of wscript.
      s3-libads: make ads_guess_service_principal static.
      s3-libnet: fix a WITH_ADS / HAVE_ADS mismatch.
      s3-libsmb: fix ifdef check in ads_dc_name.
      waf: substitute '/' in -D static defines as well.
      s3-waf: rework the way SMBLDAP subsystem is built a little.
      s3-waf: use bld.env.HAVE_LDAP in some more places, hopefully fixes the builds w/o ldap.
      waf: pure cosmetic reformatting of the two samba-util object lists (to ease comparing).
      s3-waf: move all error mappings to errors subsystem.
      s3-waf: try to deal with underlinked cups libraries.
      s3-selftest: revamp selftest wscript with s4 one.
      s3-rpc_server: fix some buildwarnings in non-developer mode.
      s3-waf: next attempt to fix cups and non-cups builds.
      libcli/auth: fix PAM_ERRORS subsystem build.
      s3-waf: try to fix the netbsd build and add -lintl to the 'net' binary.
      s3-librpc: remove duplicate prototypes.
      s3-proto: remove prototype for non-existing functions.
      s3: move some defines to a better place.
      s3-librpc: no need to globally include endpointmapper headers.
      s3-waf: add UTIL_TEVENT subsystem (as in ../lib/util/wscript)
      s4-readline: remove leftover from readline merge.
      librpc: make NDR_KRB5PAC a shared library (libndr-krb5pac.so).
      s3-selftest: when skipping tests, use the selftest/skip file.
      s3: no need to globally include intl.h.
      s3-waf: TLDAP is only needed by pdb_ads (and smbtorture).
      s3-selftest: move all skipped test to skiplist.
      s3-waf: fix the build.
      s3-librpc: move server_id marshalling to own helper file.
      s3-lsa: add create_lsa_policy_handle().
      s3-lsa: add LSA_HANDLE_TRUST_TYPE.
      s3-lsa: implement _lsa_CreateTrustedDomainEx2().
      s3-lsa: implement _lsa_CreateTrustedDomainEx().
      s3-lsa: implement _lsa_CreateTrustedDomain().
      s3-lsa: add lsa_lookup_trusted_domain_by_name and lsa_lookup_trusted_domain_by_sid.
      s3-lsa: implement _lsa_DeleteTrustedDomain().
      s3-lsa: implement _lsa_QueryTrustedDomainInfo().
      s3-lsa: implement _lsa_QueryTrustedDomainInfoBySid().
      s3-lsa: implement _lsa_QueryTrustedDomainInfoByName().
      s3-lsa: implement _lsa_CloseTrustedDomainEx().
      s3-lsa: implement _lsa_OpenTrustedDomain().
      s3-lsa: implement _lsa_OpenTrustedDomainByName().
      s3-build: move priv2ld proto to smbldap.h (in order to fix non-ldap builds).
      s3-waf: add check for "struct dirent64".
      s3-waf: add check for fcntl locking.
      s3-waf: add check for broken (glibc2.1/x86) 64 bit fcntl locking.
      s3-waf: add check for "struct flock64".
      s3-waf: add check for hires timestamps in struct stat.
      s3-waf: add check for posix_fadvise().
      s3-waf: add check for various sysconf() variables.
      s3-waf: add check for __NR_inotify_init declaration.
      s3-waf: add some missing checks for macosx.
      s3-waf: add check for struct stat st_flags member.
      s4-waf: move wbinfo buildrule to winbind.
      s3-waf: make most of the nsswitch common.
      nsswitch: make wb_reqtrans a common subsystem.
      s3-waf: move libsmb/clikrb5.c and libads/kerberos.c into KRBCLIENT.
      libndr: remove prototype for nonexisting function ndr_print_ipv4_addr().
      s3-selftest: make sure we really use --format=subunit when calling smbtorture4.
      s3-waf: add check for "struct utimbuf".
      s3-waf: add check for "struct sigevent" and some of its members.
      s3: add server_id.idl and use only autogenerated code.
      s3-passdb: add PDB_CAP_TRUSTED_DOMAINS_EX.
      s3-lsa: only proceed in _lsa_EnumTrustedDomainsEx when backend has trusted domain support.
      s3-lsa: in _lsa_QuerySecurity() query the sd from the lsa policy handle.
      s3-lsa: support trust objects in _lsa_QuerySecurity().
      s4-smbtorture: add more complex spoolss_EnumPrinterDataEx test.
      s3-waf: fix popt support.
      s3-waf: we need to globally -Ilib/replace
      nsswitch: make libwbclient a public library again.
      s3-smbsharemodes: libsmbsharemodes does neither depend on krb5 or ldap.
      s4-smbtorture: fix trailing whitespace in raw.write test.
      s4-smbtorture: fix some indent in raw.write test.
      s4-smbtorture: use torture_comment() instead of printf in raw.write test.
      s3-pdb_ipa: remove uninitialized (and unused) status code.
      s3-lsa: fix some uninitialized variables in our lsa server.
      s3-waf: add check for /proc/sys/kernel/core_pattern.
      s3-waf: add check for TIME_T_MAX.
      s3-waf: add check for makedev().
      s3-waf: add check for realpath() NULL arg.
      s3-waf: add check for ftruncate extend.
      s3-waf: add replacetort binary.
      s3-printing: isolate print notification prototypes better.
      s3-printing: fix pcacp prototypes and includes.
      s3-printing: only include printing where really needed.
      s3-printing: move more printing structs to printing.h
      s3-includes: move some chgpasswd related defines to the locations where they are used.
      s3-waf: make sure ENABLE_BUILD_FARM_HACKS is enabled when run on the buildfarm.
      s3-waf: add check for sendfile on linux.
      s3-waf: add check for sendfile on freebsd.
      s3-waf: add check for sendfile on hpux.
      s3-waf: add check for sendfile on solaris.
      s3-waf: add check for sendfile on AIX.
      s3-waf: add check for TDB_ERR_NESTING.
      s3-waf: add check for getspnam().
      Revert "s3-waf: make use of LIBCLI_CLDAP subsystem"
      s3-waf: move some parts of auth to AUTH_COMMON to avoid duplicate symbols with winbindd.
      lib/util/charset: ICONV_WRAPPER needs talloc.
      s3-proto: remove some prototypes of non-existing functions.
      s3-waf: move GROUPDB into libpassdb.so.
      s3-waf: rename LIBSAMBA subsystem to LIBNTLMSSP (which it is in fact).
      s3-waf: remove more unused variables.
      s3-waf: start adding checks for quota support.
      s3-docs: document all wbinfo options.
      s3-printing: move more printing defines out of includes.h
      s3-errormap: move (unused) map_nt_error_from_wbcErr out of errormap.
      s3-vfs: make syncops_connect in modules/vfs_syncops.c static.
      s3-libads: make ndr_print_ads_auth_flags() static.
      s3-torture: fix the build of rpc_open_tcp.
      s3-server_id: only include server_id where needed.
      rap: add rap_NetSessionEnum to IDL.
      s4-smbtorture: add smbcli_rap_netsessionenum().
      s4-smbtorture: add netsessionenum rap torture test.
      s3-lanman: talk to srvsvc dcerpc server in api_RNetSessionEnum().
      s3-sessionid: avoid global include of sessionid.h
      s3-libds: use already existing ../libds/common/flag_mapping.h header.
      s3-proto: fix some inline comments.
      s3-includes: remove global include of system/readline.h.
      lib/util: LIBCRYPTO is in common already, so add it to samba-util-common.
      libreplace: move "struct timespec" checks into libreplace (where timespec is already used).
      s3-waf: add check for HAVE_FUNCTION_ATTRIBUTE_DESTRUCTOR.
      s3-waf: add check for SEEKDIR_RETURNS_VOID.
      nterr: remove trailing whitespace.
      nterr: remove space indents (use tabs instead), following coding standards.
      s3-nterr: make nt_err_desc static const.
      s4-nterr: add _N macro handling as in s3-nterr.
      nterr: make sure both nt_errs structs are the same.
      nterr: make sure both nt_err_desc structs are the same.
      s3-nterr: within nt_errstr() compare codes using NT_STATUS_V().
      s4-nterr: some minor cosmetic edits to further match s3 nterr.
      s4-nterr: move auth_nt_status_squash to nt_status_squash and move to nterr.c
      s3-nterr: use strcasecmp in nt_status_string_to_code().
      s3-waf: add wildcard commands from main wscript.
      s3-idmap: fix the build of idmap_tdb2.
      s3-selftest: no need to run rpc.samba3.netlogon twice.
      s3-epmap: fix uninitialized variable in ep_register()
      s3-epmd: remove some unused variables.
      s3-waf: fix the build.
      s3-selftest: add pattern test of dcerpc binding options (using rpc.lsa.lookupsids).
      s3-selftest: only run smbtorture4 tests when smbtorture4 is available.
      s3-rpc_server: handle DCERPC_AUTH_LEVEL_CONNECT in api_pipe_bind_req().
      s3-selftest: remove *ncacn_ip_tcp* from knownfail list.
      s3-selftest: no point in testing smb2 via ncacn_ip_tcp.
      s3-selftest: properly move connect to seal options.

Holger Hetterich (1):
      vfs_smb_traffic_analyzer shall also transfer the clients IP address.

Jelmer Vernooij (57):
      Start on alpha 15.
      talloc/tdb/tevent: Remove obsolete signatures files.
      wmi: Remove unnecessary noprint statements.
      s4-python: Properly call PyObject_Del from all destructors.
      s4-python: Add more prototypes.
      s4-python: Only set BASETYPE flag if subclassing is supported.
      heimdal_build: Look for asn1_compile (but by default, don't use it).
      heimdal_build: Allow using system heimntlm.
      heimdal_build: Allow using system krb5.
      heimdal_build: Add conditionals for all libraries.
      heimdal_build: Support using system hdb and kdc libraries.
      heimdal_build: Support using system gssapi library.
      heimdal_build: Add missing dependencies when building with system heimdal.
      Use fail_on_null.
      Fix some formatting.
      s4-python: Properly call PyObject_Del from all destructors.
      ldb: Remove duplicate definition of check_special, use PyObject_New.
      pyldb: Use pytalloc-util.
      s4-python: Add missing prototypes.
      Make all functions in pyldb.c private, as they can't be used anyway.
      pyldb: Some more OOM checks.
      pyldb: Fix memory context, add more OOM checks.
      Revert broken destructor changes.
      pyldb: Always return -1, 0, or 1 in tp_compare functions.
      Use TestCase.get_credentials() where possible.
      pyldb: Fix memory reference error.
      remove unnecessary use of pass.
      talloc: Clarify error message on access after free.
      s4-python: Allow setting TEST_DEBUG_LEVEL to override debug level for tests.
      upgradeprovision: Fix use of dict.get().
      tdbrestore: Update to GPLv3+, remove old FSF address.
      Remove unused imports.
      Use new style objects.
      acl tests: Fix import.
      param: Load web service by default.
      web_server: Avoid references to swat. Load samba.web_server instead.
      web_server: Fix initialization.
      web_server: Display trivial placeholder page if SWAT could not be found.
      remove unnecessary use of pass.
      Show text output messages when interfacing with bzr.
      s4-waf: Only show minversion when there was a minimum version specified.
      s4-waf: Skip header-not-found cache if a library is specified, as it may provide
      pysecurity: Add missing dependency on pytalloc-util.
      dlinklist: Change license to LGPLv3+ (checked with tridge).
      provision: Add missing dependency on pyldb-util.
      ldb-samba: Add missing dependency on pyldb-util.
      s4-version: Fix version finding for bzr branches.
      Fix missing dependency on libreplace.
      Make lpcfg_server_role public.
      Use <tevent.h> so the system tevent gets included, if enabled.
      tdr: Inline proto header to allow tdr.h to be used as it's a public header.
      Use <tdb.h> to include tdb, so the system include file gets used when building against
      tdb: Use <tdb.h> to include tdb so system headers are found when building against system tdb.
      samba_abi: Generate vscript entries even for ABI versions that didn't introduce
      tevent: Add lib/tevent as include directory.
      ntvfs: Add some missing dependencies on tevent/events.
      Fix some types

Jeremy Allison (61):
      Fix bug #7892 - open_file_fchmod() leaves a stale lock.
      Fix memory leak I introduced when refactoring unexpected packet code.
      Move wins_lookup_open_socket_in() to remove a compile warning.
      Explicitly set "nmbd: socket dir" in the test environment.
      Fix "make test" - ensure nmbd runs with -S (log to stdout).
      Add OPLOCK4 test which explores how Windows copes with oplock and share mode breaks on hard links.
      Fix error where Windows client spoolss returns WERR_INVALID_DATA       W_ERROR(0x0000000D)
      Add DELETE-LN test to show bug #7863 - Unlink may unlink wrong file when hardlinks are involved
      Make processing of incoming stream rename paths common between reply_mv and ntrename. Ensure we don't depend on "./" in the streams module.
      Ensure we don't use "./" in findfirst pathnames. Use a directory open of "." instead.
      Remove all uses of "./" in pathnames - make canonical. This will become important when we need to guarantee canonical names for hashing.
      Add name_hash to files_struct. Set within fsp_set_smb_fname().
      Add name_hash into the share mode entry struct (as yet only use for renames to identify a specific path).
      Add uint32_t name_hash argument (currently unused) to get_file_infos().
      Fix bug #7863 - Unlink may unlink wrong file when hardlinks are involved.
      Missed one debug printf of name_hash. Ensure always use %x.
      From Metze - make sure we're using the same string length for the hash.
      Allow "security = share" with SMB2. We already handle this in smb2/smb2_server.c
      Change "security=share" to downgrade to SMB1 from SMB2, rather than trying to fake it.
      Add delete-ln test now we can correctly delete hardlinks.
      We need to reply to SMB2_GETINFO_FILE with a class of SMB2_FILE_STANDARD_INFO on an IPC$ share.
      Add knownfail for s4 for the new oplock test.
      Based on a conversation with Volker, refactor some of the oplock code to make it comprehensible.
      Fix a couple of missing checks on talloc returns.
      Fix value overflow (one too many 'f's ).
      Move the "oplock file with byte range locks" check to the correct place, where we're making oplock decisions.
      Fix try_chown code. Use new vfs_chown_fsp() which always trys fd first.
      Fix leak in error path.
      Use corrcet function instead of cut-and-paste code.
      If possible (O_DIRECTORY exists) open an fd for a directory open.
      Add fdopendir().
      Add configure checks for fdopendir.
      Pass fsp to dptr_CloseDir(). Cope with setting the fd if we're closing an fd that opendir knows about.
      Add fdopendir to the VFS. We will use this to reuse a directory fd already open by NtCreateX.
      Remove unneeded stat call.
      Move to opening an fd on directory opens. Get more careful about symlink races.
      Don't use asprintf in this library - breaks the build on many systems. Fake with malloc/memcpy.
      Fix up some buildfarm warnings.
      Oops. Need to test for if(!NT_STATUS_IS_OK(..)) for error.
      Correctly plumb in VFS_FDOPENDIR.
      Allow SMB2_FIND to actually use the open fd handle if we support fdopendir. Fallback to pathname opendir if not.
      Make it clear we're using the open file pathname.
      Put OpenDir() back the way it was - don't overload with an fsp arg. Create OpenDir_fsp for new usage.
      Fix alignment issues in SPOOLSS "BUFFER" marshalling.
      Fix bug found against the new Mac client @ Connectathon. Mac clients
      Torture test added to run_opentest() to ensure we don't regress on
      Fix bug 7950 - Samba 3.5.x fails BASE-CREATEX_SHAREMODES_DIR smbtorture4 test
      Remember to free the second temporary string.
      Batch oplocks conflict with exclusive as well as themselves.
      Implement the SMB2 close flag SMB2_CLOSE_FLAGS_FULL_INFORMATION (and move definition to correct place).
      Ensure we don't return an incorrect access mask.
      Gratuitous change to get around transient autobuild failure :-(.
      Removed unused code check_dos_char_slowly.
      dirfd doesn't exist in some platforms.
      Finish the range checking on all FD_SET calls for select().
      Fix "cast from pointer to integer of different size" warnings on a 64-bit machine.
      Fix warning introduced by changing the size of UNIX_USER_TOKEN->ngroups from size_t to uint32_t.
      Fix one more warning introduced by changing the size of UNIX_USER_TOKEN->ngroups from size_t to uint32_t.
      Fix compiler warning on casting -1 to uint32.
      Fix examples/VFS to use correct prototypes for is_offline() and set_offline().
      Fix the examples/VFS build.

Jonathan Nieder (1):
      s3-param: Make "rlimit_max below minimum Windows limit" notification less scary

Justin Maggard (1):
      Detect Mac OS X as a separate client type.

Kai Blin (1):
      errormap: Add unix_to_werror() function

Kamen Mazdrashki (40):
      s4-ldb_ldif: Don't check for LDB_FLG_SHOW_BINARY in ldb_should_b64_encode
      s4-ldb_ldif: Take into account LDB_FLG_SHOW_BINARY
      s4-repl_meta_data: We should not use USNs in metadata comparisons
      s4-repl_meta_data: Print out what is wrong when we fail to modify object
      s4-repl_meta_data: replmd_update_is_newer() should not return true if metadata stamps are equal
      s4-test/delete_object: Remove global ldb connections
      s4/samba-tool: Add --sync-forced flag to 'drs replicate' command
      s4/samba-tool: 'drs options' command implementation
      s4/samba-tool/drs: Move get_dsServiceName function at module level to be re-used
      s4/samba-tool/drs: Make use of Command.message() method instead of using 'print'
      s4/tests: Implement BlackboxTestCase.check_output() method
      s4/tests: Move command line processing into separate method to be reused
      s4/tests: Implement a blackbox test for 'samba-tool drs' command
      s4/ldb_modules/acl.c: Fix calculation for samAccountName string len
      s4-ldb_modules/util: Implement dsdb_module_find_ntdsguid_for_computer()
      s4-ldb_modules/acl: Get correct NTDSDSA objectGUID to check SPN for
      s4-ldb_modules/acl: Use ntds_guid for SPN check only we have a DC object
      s4-ldb_modules/operational: Make use of dsdb_module_reference_dn() function
      s4/drs-tests: Add a base class to hold common functionality for all DRS python tests
      s4/drs-tests: Inherit DrsDeleteObjectTestCase from DrsBaseTestCase
      s4/drs-tests: Inherit DrsFsmoTestCase from DrsBaseTestCase
      s4/drs-tests: Inherit DrsReplSchemaTestCase from DrsBaseTestCase
      s4/drs-tests: Split samba-tool command line generation into separate method
      s4/drs-tests: Allow _net_drs_replicate to force replication and return output from command execution
      s4/samba.tests: Extend CalledProcessError class to store STDOUT and STDERR for a failed rocess call
      s4/samba.tests: Raise BlackboxProcessError exception in case check_output method fails
      s4/drs-tests:Blackbox test to verify DsReplicaSync handling
      s4-drepl: Pass replication options from DsReplicaSync call
      s4-drepl: Refactor dreplsrv_run_pull_ops() to
      s4-drepl: Fix replica sync callback to really store last error rather than last success
      s4-drepl: Schedule event to trigger replication rather than calling run_pending_ops directly
      s4/drs-tests: Move enable/disable replication methods to DrsBase class so we can re-use them
      s4/drs-tests: Disable replication during 'deleted object' test
      s4/drs-test: remove netReplicateCmd test from 'deleted object' test case
      s4/drs-test: Remove unused imports
      s4/tests: Include 'replica_sync' test in S4 test suite
      s4/dsdb-util: Use DS_NTDSDSA_OPT_IS_GC flag definition
      s4-replicated_objects: Implement a mechanism to relax some attributes conversion
      s4-repl/working_schema: Ignore some attributes when bulding working schema cache
      s4-libnet_vampire: Ignore some attributes when building working schema cache

Karolin Seeger (4):
      WHATSNEW: Add information on changed security defaults.
      WHATSNEW: Update changed parameters.
      WHATSNEW: Update changed parameters.
      s3/docs: Remove superfluous bracket.

Matthias Dieter Wallnöfer (84):
      s4:dynconfig/dynconfig.h - fix ending newline warning
      ldb:ldb_dn_explode - remove/unify some duplicate initialisations
      ldb:ltdb_sequence_number - check for an OOM exception
      s4:winbind/idmap.c - we cannot use "failed" until we are in a transaction
      torture:drs/rpc/msds_intid.c - proof for the correct "intId"
      ldb:ldbsearch.c - fix possible uninitialised variable
      ldb:ltdb_sequence_number - initialise "tmp_ctx" to prevent uninitialisation warning
      s4:librpc/rpc/dcerpc_connect.c - fix uninitialised variable
      s4:extended_dn_out LDB module - initialise "have_reveal_control"
      s4:dns_server/dlz_bind9.c - initialise "ret" variables
      s4:torture/nbench/nbench.c - initialise "n"
      ldb:ldb_dn.c - fix counter type in "ldb_dn_minimise"
      s4:samldb LDB module - fix "userAccountControl" handling
      s4:urgent_replication.py - remove a now superflous RELAX control
      s4:web_server - immeditately assign "wdata" as private data for the stream socket
      s4:samr RPC server - always interpret filter integer values as signed
      s4:auth/ntlm/auth_sam.c - fix call to "get_server_info_principal"
      s4:dsdb_find_nc_root - fix it up to let the provisioning work correctly
      ldb: inherit parent flags on child requests in modules
      s4:dsdb/samdb/ldb_modules/objectclass.c - move LSA specific object checks into "objectclass_attrs" LDB module
      s4:ldap.py - check the write protection on LSA objects
      s4:auth/pyauth.c - temporarily add compatibility code for Python 2.4
      ldb:ldbadd tool - use LDB result constants for consistency
      ldb:ldbadd tool - use "%u" for printing out unsigned integers
      ldb:ldbadd tool - use LDB return codes where possible
      ldb:ldbdel tool - use LDB result constants for consistency
      ldb:ldbmodify tool - use unsigned counters for consistency with other LDB tools
      ldb:ldbrename tool - use LDB result constant where needed
      ldb:ldbedit tool - use LDB result constants where needed
      ldb:ldbedit tool - use "%u" for printing out unsigned integers
      ldb:ldbedit tool - use unsigned counters for consistency with other LDB tools
      ldb:ldbedit tool - fix bug #7914
      ldb:ldbedit tool - don't forget about the "do_edit" result code
      ldb:ldbsearch tool - use "%u" for printing unsigned integers
      ldb:ldbsearch tool - simplify error code return
      ldb:ldbsearch tool - use LDB result constants where possible
      ldb:tools - always check if ldb connection has been estabilished
      ldb:tools - return LDB_ERR_OPERATIONS_ERROR on generic errors
      s4:WAF build - remove "source4/configure.developer"
      libcli/security - fix two output format specifiers
      s4:acl LDB module - interpret "userAccountControl" as "uint32_t"
      s4:sam.py - add another "description" test case
      s4:samr RPC server - QueryDisplayInfo returns always all domains users, aliases and groups
      s4:torture/rpc/samr.c - fix up the "test_GroupList" suite regarding QueryDisplayInfo
      s4:scripting/python/modules.c - remove a really unnecessary variable
      libcli/security/display_sec.c - fix wrong counter type
      libcli/security/sddl.c - fix wrong counter type
      libcli/security/privileges.c - fix the counting of privileges
      libcli/security/privileges.c - fix wrong counter type
      libcli/security/security_descriptor.c - fix three wrong counter variables
      s4:scripting/python/modules.[ch] - explicitly say that "py_update_path" takes no argument
      s4:torture/rpc/netlogon.c - fix two build warnings by casts
      libcli/nbt/wscript_build - fix build of "lmhosts"
      Revert "heimdal_build omit #line statments to allow valgrind to work again"
      s4:remove many invocations of "samdb_msg_add_string"
      s4:libnet/libnet_samsync_ldb.c - add a "samdb_msg_add_string" wrapper
      s4:dsdb/common/util.c - fully remove "samdb_msg_add_string"
      s4:dsdb/common/util.c - remove "samdb_find_or_add_value"
      s4:dsdb - always handle the attribute "options" as 32bit unsigned integer
      s4:drsuapi RPC server - check for the "SPN" attribute != NULL
      s4:netlogon RPC server - "LogonGetDomainInfo" - check for NULL attributes
      s4:drsuapi RPC server - this resembles more "samdb_is_gc"
      s4:torture/rap/rap.c - remove unused variable "i"
      s4:objectclass LDB module - if we cannot find DN's parent then the DN itself is invalid
      s4:LDAP server - remove validation checks of input DNs
      ldb:ldb tools - ldbtest - convert other result values to LDB codes as well
      ldb:ldb tools - return LDB_ERR_INVALID_DN_SYNTAX on wrong DN parameters
      ldb:ldb tools - remove a superflous "return" (usage internally calls "exit")
      s4:libnet/libnet_site.c - make use of LDB return constants
      s4:objectclass LDB module - fix a comment
      ldb:ldb_request - handle here the DN checks
      Revert "s4:objectclass LDB module - if we cannot find DN's parent then the DN itself is invalid"
      s4:dsdb - we don't need to check if a DN != NULL if we call "ldb_dn_validate"
      s4/ldb - remove now superflous "ldb_dn_validate" checks
      ldb:rdn_name LDB module - more RDN constraint checks (from AD)
      s4:ldap.py - remove a debug output
      s4:ldap.py - other important RDN check testcases
      ldb:ldb_msg.c - use LDB result constants for checking return values
      s4:operational LDB module - readd "structuralObjectClass" -> "objectClass" mapping
      s4:operational LDB module - add "groupToken" as unsigned int (uint32_t)
      s4:operational LDB module - fix display of some constructed attributes
      s4:ldap.py - add a test in order to show the operational module fixed
      s4:ldap.py - rootdse tests should search for the rootDSE not the default DN
      s4:operational LDB module - fix attribute names to be right up/down-cased

Matthieu Patou (19):
      s4: make pipes with underscore works also
      Add some debug in s4's winbind server
      idl: remove protected storage
      idl: Add IDL for remote key backup protocol (rkbp)
      torture: add ndr tests for backup key protocol
      s4 torture: add new rpc torture tests for backup key remote protocol
      ldb: remove "magic" string in ldb_controls, replace them with constants defined in ldb.h
      ldb: use the sizeof of the control variable as offset instead of hardcoded values, helps to avoid bugs
      librpc: add bindings for dnsp in python
      pyldb: fix a bug in the unit test which prevented ldb.python to run all the tests in the testsuite
      s4: Add server side implementation of backup key remote protocol
      s4: load the backupkey endpoint
      s4:selftest: add tests with seal and sign for backupkey
      ldb: controls marshalling/unmarshalling improvement
      s4-unittests: replace assertEquals(res, []) by assertEquals(len(res), 0)
      pyldb: create LdbResult, return value from ldb.search is now a LdbResult
      pyldb: Add tests for the ldb_result object
      pyldb: add tests for getting control results
      s4: avoid overwritting the dceprc.h file from toplevel librpc

Michael Adam (120):
      examples:createdombj: default prefix to target-type, not "group"
      s3:idmap_ldap: remove use of the ldap_idmap_alloc_context from verify_idpool().
      s3:idmap_ldap: don't call idmap_ldap_alloc_init in idmap_ldap_init.
      s3:idmap_ldap: remove unused idmap_ldap_alloc_init().
      s3:idmap_ldap: remove unused idmap_ldap_alloc_close_destructor().
      s3:idmap_ldap: remove use of alloc context from idmap_ldap_allocate_id().
      s3:idmap_ldap: remove alloc context member from ldap_idmap_context
      s3:idmap_ldap: remove unused idmap_ldap_alloc_context.
      s3:idmap_ldap: remove special handling of alloc secret (not used any more).
      s3:net: remove alloc parameter from idmap_store_secret() (net idmap store).
      s3:net: fix the usage for net idmap secret (removing alloc)
      s3:net: make idmap_store_secret static.
      s3:winbindd/idmap.c: add my C
      s3:winbindd/idmap_util.c: add my C
      s3:winbindd/idmap_ad.c: update my C
      docs: Remove template "itemizedlist/listitem" from man.xsl
      packaging/RHEL-CTDB: untangle the various %doc entries to single lines
      packaging/RHEL-CTDB: do not use an external docs tarball but build the manpages
      packaging/RHEL-CTDB: add the pam_winbind.conf manpage
      packaging/RHEL-CTDB: add the smbta-util manpage
      release-scripts: remove commented out line from git-version
      release-scripts: add gpl header comment to build-manpages-git
      release-scripts: add gpl header comment to build-manpages-nogit
      release-scripts: add build-htmlman-git
      release-scripts: add build-htmlman-nogit
      s3:vfs:shadow_copy2: fix indentation in _SHADOW2_NEXT_SMB_FNAME
      s3:docs: document "winbind max domain connections"
      s3:registry: fix comments in regdb_store_regdb_version()
      wbinfo: remove --set-uid-mapping - winbindd does not implement that any more.
      wbinfo: remove --set-gid-mapping - winbindd does not implement that any more.
      wbinfo: remove --remove-uid-mapping - winbindd does not implement that any more.
      wbinfo: remove --remove-gid-mapping - winbindd does not implement that any more.
      libwbclient: remove two unused defines
      libwbclient: remove wbcSetUidMapping() - not implemented any more
      libwbclient: remove wbcSetGidMapping() - not implemented any more
      libwbclient: remove wbcRemoveUidMapping() - not implemented any more
      libwbclient: remove wbcRemoveGidMapping() - not implemented any more
      libwbclient: remove wbcSetUidHwm() - not implemented any more
      libwbclient: remove wbcSetGidHwm() - not implemented any more
      libwbclient: bump version to 0.6 -> 1.0 due to ABI change (removed symbols)
      libwbclient: bump the libwbclient SOVER 0 -> 1 due to ABI changes
      docs: update wbinfo manpage: remove documentation of removed parameters
      s3:net registry: fix a debug message.
      s3:net registry: fix a debug message.
      s3:registry: in deletekey_recursive, fix return code upon error.
      s3:net registry: ignore WERR_BADFILE when --force is given in deletekey[_recursive]
      s3:net conf: fix a comment typo
      s3:loadparm: skip leading spaces in parameter values from the command line
      s3:popt: add POPT_COMMON_OPTION to provide only the "--option" feature
      s3:testparm: add "--option" to testparm
      s3:net idmap: fix error reporting in net_idmap_dbfile()
      s3:net idmap restore: correctly abort operation if dbfile could not be determined
      s3:net idmap dump: report correct database file when failed to open idmap db.
      Revert "nsswitch: remove unused code from wbinfo.c"
      Revert "nsswitch: libwbclient has vnum 1 now."
      Revert "libwbclient: bump version to 0.6 -> 1.0 due to ABI change (removed symbols)"
      Revert "libwbclient: remove wbcSetGidHwm() - not implemented any more"
      Revert "libwbclient: remove wbcSetUidHwm() - not implemented any more"
      Revert "libwbclient: remove wbcRemoveGidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcRemoveUidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcSetGidMapping() - not implemented any more"
      Revert "libwbclient: remove wbcSetUidMapping() - not implemented any more"
      Revert "libwbclient: remove two unused defines"
      Revert "wbinfo: remove --remove-gid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --remove-uid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --set-gid-mapping - winbindd does not implement that any more."
      Revert "wbinfo: remove --set-uid-mapping - winbindd does not implement that any more."
      Revert "libwbclient: bump the libwbclient SOVER 0 -> 1 due to ABI changes"
      libwbclient: doxygen: mark wbcSetUidMapping deprecated
      libwbclient: doxygen: mark wbcSetGidMapping deprecated
      libwbclient: doxygen: mark wbcRemoveUidMapping deprecated
      libwbclient: doxygen: mark wbcRemoveGidMapping deprecated
      libwbclient: doxygen: mark wbcSetUidHwm deprecated
      libwbclient: doxygen: mark wbcSetGidHwm deprecated
      s3:smbd: fix switch indentation level in get_ea_dos_attribute()
      s3:net: fix usage for "net rpc registry export"
      testprogs/blackbox/subunit: add testok() for easier integration of s3 tests.
      s3:test: add a simple blackbox test that succeeds.
      s3:test: add the success blackbox test as samba3.blackbox.success
      s3:test: add a simple failing blackbox testsuite
      s3:test: add the failure blackbox test as samba3.blackbox.failure
      s3:test: add the "blackbox.failure" test to the knownfail tests
      s3:test: use the blackbox subunit test driver in the net_misc tests.
      s3:test: use the blackbox subunit test driver in the net_registry tests.
      s3:test: add comment header to test_net_registry.sh
      s3:test: move the registry roundtrip test to a test script of its own
      s3:test: add the registry roundtrip test as samba3.blackbox.net_s3_registry_roundtrip
      s3:test: mark the net_registry_roundtrip test as knownfail
      s3:test: rename samba3.blackbox.net_s3_misc --> samba3.blackbox.net.misc
      s3:test: rename samba3.blackbox.net_s3_registry -> samba3.blackbox.net.local.registry
      s3:test: rename samba3.blackbox.net_s3_registry_rpc -> samba3.blackbox.net.rpc.registry
      s3:test: rename samba3.blackbox.net_s3_registry_roundtrip -> samba3.blackbox.net.local.registry.roundtrip
      s3:test: rename samba3.blackbox.testparm_s3 -> samba3.blackbox.testparm
      s3:test: remove the give/take admin rights code from the net(rpc)registry test
      s3:test: run the net.rpc.registry test under "dc" not "dc:local"
      s3:tests: use the blackbox subunit output formatter for the smbclient_s3 test.
      s3:tests: include subunit.sh instead of test_functions.sh in test_local_s3.sh
      s3:tests: use the blackbox subunit output formatter for the testparm_s3 test.
      s3:tests: include subunit.sh instead of test_functions.sh in test_wbinfo_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_smbtorture_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_ntlm_auth_s3.sh
      s3:tests: include subunit.sh instead of test_functions.sh in test_posix_s3.sh
      s3:tests: remove unused script/tests/test_functions.sh
      s3:tests: fix the smbclient_s3 test for multiple users running it.
      s3:tests: clean up old log directories of the registry.roundtrip test
      s3:tests: move the log directory of the smbclient_s3 test to st/
      WHATSNEW: document new nfs quota backend for linux
      WHATSNEW: document removed parameter "idmap alloc backend"
      s3: fix the waf build after adding smbd/msg_idmap.c
      s3:msg_idmap: The solaris cc compiler does not like unnamed unions as struct members - fix the build
      s3:test: fix registry roundtrip test on older systems (usage of mktemp)
      s3:test: fix smbclient test on older systems (usage of mktemp)
      s3:idmap_cache: remove an leftover wip comment
      s3:test: improve logging in the net registry roundtrip test steps
      s3:test: correctly react to each failing step in the net registry roundtrip tests
      s3:registry: fix invalid write in iconvert_talloc()
      s3:test: in net registry roundtrip test, exclude the files from exclude/logon
      s3:test: in net registry roundtrip test, mark "lock dir" as invalid parameter
      s3:test: mark vanished parameter "postscript" invalid in net registry roundtrip test
      s3:test: the registry roundtrip test passes now

Michael Wood (4):
      s4: upgradeprovision: Improve wording, punctuation
      s4: samba_backup: Fix typos.
      s4/upgradeprovision: Typo and better word.
      s4/upgradeprovision: Fix help for --debugguess.

Milan Crha (1):
      s4:heimdal - fix valgrind issue on Fedora 14

Nadezhda Ivanova (18):
      security: Fixed bugs in expansion of generic information ACEs
      s4-tests: Tests for expansion of ACEs containing generic information.
      security: Fixed incorrect indentation in create_descriptor.c
      s4-tools: Added a --sort-aces option to ldapcmp
      s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the object had no SACL.
      s4-provision: Fixed owner/group for hard-coded Sites descriptor.
      s4-security: Fixed incorrect inheritance of IO flagged ACES
      s4-tests: Added a test for correct inheritance of IO flagged ACEs.
      s4-acl: Fixed returning uninitialized ldap error in case of some critical errors.
      security: Fixed some handling of ACEs with INHERITED flag provided by the user
      s4-tests: Some tests that prove behavior for INHERITED user-provided ACEs is different if the P flag is set.
      s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
      s4-descriptor: Replaced the synchronous descriptor_change with the synchronous descriptor_add.
      s4-descriptor: Replaced the async descriptor_change with synchronous descriptor_modify.
      s4-descriptor: Removed unnecessary descriptor_change function and unused callbacks.
      s4-descriptor: Fixed some compiler warnings.
      s4-descriptor: Fixed some missing curly braces.
      s4-descriptor: Fixed a typo in a comment and clarified it a bit.

Olly Betts (1):
      Fix "net usersidlist" not to skip every other user

Paul B. Henson (1):
      Fix bug #7909 - map SYNCHRONIZE acl permission statically in zfs_acl vfs module.

Pavel Shilovsky (4):
      Fix bug #7928 - Samba problems with kernel oplocks option set to "no"
      smbtorture4 test for bug #7928 - Samba problems with kernel oplocks option set to "no"
      Ensure we send the direct levelII oplock break to the correct fid.
      s4: Don't grant level II oplock to a file with byte-range locks.

Rusty Russell (2):
      tdb: tdb_summary() support.
      s3:vfs:gpfs: fix logic when gpfs:winattr is false (the default!)

Sean Finney (1):
      libds/common/flag_mapping.c - fix another build dependency

Simo Sorce (6):
      mit-samba: Allow nesting on the event context
      Increase minor version since a public header has changed
      Fix private libdir and codepages paths
      Fix broken build with make dist tarballs
      sr-epmap: Minor cleanups and fixes
      s3-epmap: add ncalrpc listener code

Stefan Metzmacher (193):
      Merge remote branch 'origin/v4-0-test'
      s4:ldb:python/api: use filename() instead of hardcoded filenames
      s4:ldb:python/api: use only one ldb file in test_contains()
      testprogs:test_kinit: create tmp files under $PREFIX
      tdb:tdbtest: use TEST_DATA_PREFIX for files
      tdb:tdbtorture: use TEST_DATA_PREFIX for files
      s3:selftest: mark samba3.posix_s3.smb2.lock (dc).rw-exclusive as known to fail
      selftest: setup $ENV{TEST_DATA_PREFIX}
      s4:selftest: selftest.pl already sets TEST_DATA_PREFIX
      s4:selftest: specify the gentest_seeds.dat location
      tdb: setup TEST_DATA_PREFIX for make test
      s4:ldb/tests: there's no need to copy samba4.png
      s4:ldb:python/api: use filename() instead of hardcoded filenames
      s4:ldb: setup TEST_DATA_PREFIX for make test
      .gitignore: cleanup old stuff
      WHATSNEW: fix indentation
      s3:winbindd: remove useless ';'
      tdb: add ABI/tdb-1.2.9.sigs
      s3:lib/netapi: don't set SAMR_FIELD_FULL_NAME if we just want to set the account name (bug #7896)
      script/autobuild.py: check that the source tree has no uncommitted changes after make
      s3: Happy New Year 2011
      s4: Happy New Year 2011
      libcli/auth: add netsec_outgoing_sig_size()
      s4:gensec/schannel: use netsec_outgoing_sig_size() to get the signature size
      s3:librpc: use netsec_outgoing_sig_size() instead of a hardcoded signature
      lib/crypto: add aes_cfb8_encrypt()
      s3:net_rpc_vampire_keytab: don't return -1 on success (bug #7899)
      nsswitch: remove includes.h dependency from nsstest.c
      Revert "nsswitch Add talloc depencency for nsstest"
      s3:build: don't use cli_wbint.c any more
      s3:rpcclient: use dcerpc_binding_handle client stubs in cmd_ntsvcs.c
      s3:build: don't use cli_ntsvcs.c any more.
      s3:rpc_client: use dcerpc_epm_Map() and don't ignore 'result' anymore.
      s3:rpcclient: use dcerpc_binding_handle bases client stubs in cmd_epmapper.c
      s3:rpcclient: improve "epmmap" output
      s3:build: don't use cli_epmapper.c anymore
      s3:rpcclient: use dcerpc_binding_handle based client stubs in cmd_dssetup.c
      s3:winbindd: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
      s3:net_utils: use dcerpc_dssetup_DsRoleGetPrimaryDomainInformation()
      s3:build: don't use cli_dssetup.c any more
      talloc: change version to 2.0.5 after a critical bugfix
      pidl: sync idl.yp with the CPP changes
      pidl: regenerate lib/Parse/Pidl/Expr.pm from expr.yp
      pidl:Samba4/Python: fix segfault when setting pointers to scalars.
      pidl:Samba4/Python: avoid ';;' in generated C code.
      buildtools/wafsamba: import 'sys' and 'Logs' if we use them
      pidl/wscript: let the developer use the standalone build with yapp
      script/autobuild.py: fix path to clean-source-tree.sh from within lib/tevent/
      script/autobuild.py: add pidl tests
      pidl/wscript: only warn about grammar file changes
      pidl:Samba4/Python: fix memory leak in _ndr_print functions
      s3:rpcclient: use ndr_dfs_c.h instead of cli_dfs.h
      s3:rpcclient: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:net: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:winbindd: use ndr_dssetup_c.h instead of cli_dssetup.h
      s3:winbindd: use ndr_wbint_c.h instead of cli_wbint.h
      drsuapi.idl: add some more DRSUAPI_ATTID_* values
      s3:rpcclient: use dcerpc_echo_X() functions
      s3:torture: use dcerpc_echo_X() functions
      s3:build: don't use librpc/gen_ndr/cli_echo.[ch] anymore
      pidl:wscript: don't warn about pidl gammar file changes for now
      s4:tls_tstream: fix partial reads, so that the gnutls layer doesn't read the same data twice
      s4:tls_tstream: also use a dynamic buffer for the pull side
      s4:selftest/skip: add samba4.tokengroups.python
      wafsamba: quote CPP and CC values when calling pidl
      lib/util: fix rounding to page size in allocate_anonymous_shared()
      lib/util: s/allocate_anonymous_shared/anonymous_shared_allocate/
      lib/util: add anonymous_shared_free()
      lib/util: add tests for anonymous_shared_allocate/free()
      s3:smbd: use anonymous_shared_free() for shared memory signing state
      s4:selftest/skip: remove samba4.tokengroups.python
      s4:selftest: mark samba4.nbt.winsreplication.owned as knownfail
      s3:librpc: remove prototype of dcerpc_binding_handle_set_ref_alloc()
      pidl:Samba4/NDR/Client: remove compat mode for dcerpc_pipe based bindings
      s3:libads: use dcerpc_spoolss_X() functions
      s3:net: use dcerpc_spoolss_X() functions
      s3:smbd: use dcerpc_spoolss_X() functions
      s3:srv_spoolss: use dcerpc_spoolss_X() functions
      s3:printing: use dcerpc_spoolss_X() functions
      libcli/ldap: use lib/ldb_compat.h for the s3 build
      pidl:Samba3/ServerNDR: correctly initialise ndr_push struct
      pidl:Typelist: fix perl warnings about recursiv function calls
      libcli/util: add NT_STATUS_RPC_SEC_PKG_ERROR define
      s3:libsmb: display NT_STATUS_RPC_SEC_PKG_ERROR in error strings
      s4:libcli/util: display NT_STATUS_RPC_SEC_PKG_ERROR in error strings
      dcerpc.idl: add DCERPC_FAULT_SEC_PKG_ERROR
      librpc/rpc: add dcerpc_fault_to_nt_status() mapping from DCERPC_FAULT_SEC_PKG_ERROR
      Revert "s3:events: Call all ready fd event handlers on each iteration of the main loop"
      Revert "s3: Fix starving the echo responder"
      s3:lib/events: don't loop over fd events is select gave -1
      s3:smbd: let smbd_server_connection_loop_once() check for select errors
      s3:lib/events: use DLIST_DEMOTE() for fd events
      midltests: explore 'ms_union' option.
      midltests: 'ms_unions' with enum vs. long
      midltests: unions with enum vs. long
      midltests: union alignment with enum as switch_type
      midltests: union alignment with enum as switch_type and 'ms_union'
      midltests: more union alignment example without ms_union
      midltests: more union alignment example with ms_union
      midltests: add examples of toplevel vs. embedded unions without 'ms_union'
      midltests: add examples of toplevel vs. embedded unions with global 'ms_union'
      midltests: add examples of toplevel vs. embedded unions with mixed 'ms_union'
      midltests: test encapsulated unions without 'ms_union'
      midltests: test encapsulated unions with 'ms_union'
      midltests: add todo/midltests-pipe-sync-ndr32-downgrade-02.idl
      midltests: add invalid/midltests_pipe_struct_union_01.idl
      pidl:NDR: add support for 'ms_union' property.
      pidl:Samba4/NDR/Parser: only do the switch type alignment when we have a switch type
      pidl:Samba4/NDR/Parser: add support for 'ms_union' style aligment
      pidl:Samba4/NDR/Parser: fix ndr_pull/ndr_push mismatch
      s3:rpcclient/cmd_netlogon: fix netr_DELTA_* display
      s3:libnet/libnet_samsync_display: fix netr_DELTA_* display
      s3:rpcclient/cmd_samr: remove useless ';'
      s4:rpc_server/netlogon: return INVALID_INFO_CLASS for invalid netr_Validation levels
      s4:rpc_server/netlogon: set *r->out.authoritative = 1 even on INVALID_PARAMETER/INFO_CLASS
      s4:rpc_server/netlogon: add dcesrv_netr_LogonSamLogon_check()
      s3:rpc_server/netlogon: add _netr_LogonSamLogon_check()
      netlogon.idl: add missing [default]; union arms
      netlogon.idl: use 'ms_union' as specified in [MS-NRPC]
      netlogon.idl: remove pointless union arms of netr_DELTA_UNION
      s4:torture/rpc/netlogon: test validation levels 2 and 3
      s4:torture/rpc/netlogon: test invalid LogonSamLogon levels
      s4:torture/rpc/netlogon: test invalid netr_LogonControl() level
      s4:torture/rpc/netlogon: improve comments in test_LogonControl2()
      s4:torture/rpc/netlogon: add invalid level tests for netr_LogonControl2
      s3:winbindd: catch lookup_names/sids schannel errors over ncacn_ip_tcp (bug #7944)
      s3:groupdb: allow machine accounts as members.
      s3:libnet: add 'process_links' to dssync_ops
      s3:net: "net rpc vampire" is an alias for "net rpc vampire passdb"
      s3:net: make some net_rpc_samsync.c functions static
      s3-dssync-passdb: implement accounts, aliases and groups
      s3:lib: allow_trailing_dollar should only allow '$'
      s3:libnet_dssync_passdb: remove useless DEBUG statements
      Revert "replace: Try to fix broken sys/capabilites.h on Linux."
      replace: Try to fix broken sys/capabilites.h on Linux.
      s3:rpc_server/netlogon: reject validation level 6 without ads support
      s3:winbindd: fix segfaults on addrchange errors and make DEBUG() statements more usefull
      s3:lib/addrchange: let addrchange_done() retry and ignore unknown message types
      s3:lib/addrchange: remove unused pointer
      s3:lib/addrchange: set ctx->sock to -1 after close
      s3:Makefile.in: use waf directly to build smbtorture4 and ndrdump4
      s4:selftest: skip samba4.rpc.backupkey for now
      s3:rpc_server: fix make_external_rpc_pipe_p() and create read and write queues
      script/autobuild.py: git diff has a '--stat' option, no need to use 'diffstat'
      s3:rpc_client: make rpccli_bh_create() non-static for now
      s3:rpc_server: create binding_handle in rpc_pipe_open_external()
      s4: Renable samba4.rpc.backupkey
      s4:ldapcmp: cope with range retrivals of multivalued attributes
      s4:drsuapi/getncchanges: make sure we don't process filteres objects more than once
      s3:auth: change num_groups to from size_t to uint32_t
      s3-waf: make use of LIBCLI_CLDAP subsystem
      s4:build: add RPC_NDR_ATSVC subsystem
      s4:librpc: let dcerpc-samr library use RPC_NDR_SAMR subsystem
      s3-waf: make use of LIBCLI_CLDAP subsystem
      s3:rpc_client: we need to pass a non-blocking socket to tstream_bsd_existing_socket()
      s4:dynconfig: add prototypes for *dyn_LOCALEDIR
      s4:dynconfig: fix segfault in the set_dyn_*() functions
      s3: Remove unused receive_packet
      Revert "Fix alignment issues in SPOOLSS "BUFFER" marshalling."
      TODO test/review librpc/ndr: let ndr_push/pull_DATA_BLOB() look at LIBNDR_FLAG_REMAINING before LIBNDR_ALIGN_FLAGS
      librpc/ndr: ndr align relative pointers based on the given flags
      TODO test/review librpc: align nstring and nstring_array to 2 byte
      TODO test/review librpc/ndr: remove align2 hack for relative pointers
      spoolss.idl: align spoolss_PrinterEnumValues 'data' based on the type
      spoolss.idl: align spoolss_DriverFileInfo relative pointer to 4 byte
      librpc/ndr: handle NOALIGN flag for relative pointers and alignment DATA_BLOBs
      librpc/rpc: let ndr_pull_spoolss_EnumPrinterDataEx() use a subcontext
      librpc/idl: remove unused string defines from idl_types.h
      socket_wrapper: don't allow connect() to the broadcast address
      socket_wrapper: fix compiler warnings
      socket_wrapper: move swrap_ioctl() above the send*/recv* functions
      socket_wrapper: readv() should only work on connected sockets
      socket_wrapper: replace recvmsg() correctly
      socket_wrapper: add swrap_sendmsg_before/after helper functions
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_sendto()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_send()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_sendmsg()
      socket_wrapper: use swrap_sendmsg_before()/after() in swrap_writev()
      lib/socket_wrapper: try to fix the build on solaris
      HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_request() and _kdc_tgs_rep()
      s4:kdc: fix calculation of the rodc kvno
      s4:kdc: add a kdc_proxy_unavailable_error() helper function
      s4:kdc: split the kdc_udp_proxy() logic from the main kdc logic
      s4:kdc: split the kdc_tcp_proxy() logic from the main kdc logic
      selftest/target/Samba4: splitout a mk_krb5_conf() function
      selftest/target/Samba4: regenerate the krb5.conf after the rodc join
      s4:selftest: test using the machine account of the rodc against itself
      s4:samba-tool: improve help messages for samba-tool password
      socket_wrapper: fix handling of addr and addrlen
      s4:lib/socket: use sockaddr_in6 in ipv6_tcp_accept()
      tevent: change tevent_fd->additional_flags to uint64_t
      tevent/poll: use fde->additional_flags to hold the array index
      tevent: change version to 0.9.11

Stephen Gallagher (1):
      Return NULL if tevent_add_fd() is passed a negative fd

Sumit Bose (27):
      replace: Add missing eval to m4 script
      s3-passdb: Add minimal stub for IPA passdb backend
      s3-ipasam: Disable old trustdom_pw calls
      s3-passdb: add {get,set,del,enum}_trusted_domain calls
      s3-passdb: make priv2ld() public
      s3-ipasam: implement {get,set,del}_trusted_domain
      s3-ipasam: implement enum_trusted_domains
      s3-lsa: Let _lsa_CreateTrustedDomainEx2() use pdb_set_trusted_domain().
      s3-lsa: make lsa_lookup_trusted_domain_by_name() use pdb_get_trusted_domain().
      s3-lsa: make _lsa_DeleteTrustedDomain() use pdb_del_trusted_domain().
      s3-lsa: Implement _lsa_EnumTrustedDomainsEx()
      s3-ipasam: add wrapper for ipasam_enum_trusteddoms()
      s3-ipasam: add ipasam_get_trusted_domain_by_sid()
      s3-lsa: fix lsa_QueryTrustedDomainInfo
      s3-lsa: Use pdb_get_trusted_domain_by_sid in _lsa_QueryTrustedDomainInfo()
      s3-ldap: Update LDAP schemata to include sambaTrustedDomain.
      s3-lsa: Extract auth info from trustDomainPasswords
      s4-smbtorture: Two fixes for forest trust test against samba.
      s3-ipasam: add pdb_ipasam_capabilities() and pdb_ipasam_get_domain_info()
      s3-lsa: fix return code of _lsa_QueryTrustedDomainInfoByName()
      s3-lsa: Add and remove trusted domain account
      s3-ipasam: add IPA specific attributes
      s4-smbtorture: Fix for RPC-LSA-FOREST-TRUST.
      s3-lsa: Implement lsaRSetForestTrustInformation
      s3-ldap: Add sambaTrustForestTrustInfo to LDAP schemata
      s3-netlogon: Implement NetrServerGetTrustInfo and NetrGetForestTrustInformation
      s3-ipasam: Add aliases for trusted domain user

Volker Lendecke (262):
      tevent: Fix a typo
      tevent: Some documentation fixes
      tevent: More doc fixes
      tevent: More documentation updates
      async_send->sendto, async_recv->recvfrom
      s3: Fix some typos
      s3: Remove an ancient typedef
      s3: Make node_status_query return NTSTATUS
      Fix a crash in libnss_wins
      Fix a memleak in nss_wins
      s3: AllowDebugChange is gone
      s3: Make name_query return NTSTATUS
      Use sockaddr_storage in async sendto/recvfrom
      s3: Allow more control over smbsock_[any_]connect
      s3: Fix two uninitialized variables
      s3: Fix some nonempty blank lines
      s3: Add some const to send_getdc_request
      s3: Add some const to receive_getdc_response
      nss_wins: Fix a type-punned warning
      s3: Fix some nonempty blank lines
      s3: cli_send_mailslot -> cli_prep_mailslot
      s3: Factor out prep_getdc_request
      s3: Remove unused mem_ctx arg from set_getdc_request
      Fix a valgrind error
      s3: Fix a memleak in receive_getdc_response
      s3: Fix some nonempty blank lines
      s3: Basic infrastructure for /tmp/.nmbd/unexpected
      s3: Make nmbd listen on the unexpected socket
      s3: Add packet_trn_id()
      s3: Add sock_packet_read
      s3: Add nb_trans_send/recv
      s3: Make node_status_query use /tmp/.nmbd/unexpected
      s3: Make name_query use /tmp/.nmbd/unexpected
      s3: Lift my_mailslot from prep_getdc_request
      s3: Factor out parse_getdc_response
      s3: Fix a valgrind error
      s3: Add nbt_getdc
      s3: Use the new nbt_getdc in dsgetdcname()
      s3: Use the new nbt_getdc in winbindd_cm
      s3: Limit the number of unexpected packets per client to 10
      s3: Limit the number of unexpected clients to 200
      s3: Remove some unused code
      s3: Make nmbd socket dir configurable
      s3: Fix some nonempty blank lines
      s3: Fix a type error
      s3: Avoid a ton of registry writes at startup
      s3: Fix some warnings in the zfsacl module
      s3: Fix two incompatible pointer type warnings on Solaris
      s3: Convert enc_blob_send_receive to cli_trans()
      m4: Don't AC_MSG_ERROR when too old python is found
      s3: Remove superfluous ;
      s3: Remove a pointless else
      s3: Fix some nonempty blank lines
      s3: Fix bug 7917: Yet another bug in chain_reply
      s3: Fix some nonempty blank lines
      s3: Convert cli_set_secdesc to cli_trans
      s3: Avoid some calls to cli_errstr
      s3: Remove cli_send_trans from cli_oem_change_password
      s3: Remove cli_send_trans from cli_qpathinfo_alt_name
      s3: Fix a C++ warning
      s3: Fix some nonempty blank lines
      s3: Convert cli_get_user_quota to cli_trans
      s3: Convert cli_set_user_quota to cli_trans
      s3: Convert cli_list_user_quota to cli_trans
      s3: Convert cli_get_fs_quota_info to cli_trans
      s3: Convert cli_set_fs_quota_info to cli_trans
      s3: Move dump_ntquota* to smbcquotas.c
      s3: Convert try_nttrans to cli_trans
      s3: Remove unused cli_send/receive_nt_trans
      s3: Rename cli_setpathinfo->cli_setpathinfo_basic
      s3: Add cli_setpathinfo
      s3: Make cli_setpathinfo_basic use cli_setpathinfo
      s3: Convert cli_api to cli_trans
      s3: Convert try_trans2 to cli_trans
      s3: Remove unused cli_send/receive_trans
      s3: Remove unused cli_send_keepalive
      s3: Make passing up "result_parent" from cli_smb optional
      s3: Convert cli_locktype to cli_smb
      s3: Convert cli_lock to use cli_locktype
      s3: Convert cli_lock64 to cli_smb
      s3: Remove some unused code
      s3: Avoid a few calls to cli_errstr
      s3: Make sure we call wbcAuthenticateUserEx correctly
      s3: Add wbinfo --dc-info
      s3: Fix the code to immediately disconnect from a non-working ctdbd
      packaging(RHEL-CTDB): explicitly build the tsm vfs module.
      s3:winbind: Protect against invalid winbindd_cache entries in lookuprids
      s3:vfs:shadow_copy2: Fix shadow-copy module for drag&drop from a snapshot
      s3: Fix a deadlock between smbd and ctdbd
      s3:winbind: Fork multiple children per domain
      s3: Fix connecting to port-139 only servers
      s3: Fix an infinite loop
      Revert "s3: Fix an infinite loop"
      s3: Lift winbindd_cli_state from winbindd_raw_kerberos_login
      s3: Lift winbindd_cli_state from winbindd_dual_pam_auth_samlogon
      s3: Do not use state->mem_ctx in fillup_password_policy
      s3: Lift winbindd_cli_state from fillup_password_policy
      s3: inline get_uid_from_state
      s3: Remove an unneeded check
      s3: Make _lp_maxprotocol static
      s3: On FreeBSD, compile zfsacl if sunacl.h is around
      s3: Add support for AF_NETLINK addr notifications
      s3: test addrchange
      s3: Send a dropped_ip message if we lose an IP
      s3: Fix the build on sles8
      s3: Fix bug 7940 -- fall back for utimes calls
      s3: Fix a typo
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Use strlcpy in pdb_ads_connect
      s3: In pdb_ads, cope with artificial samu structs
      s3: Fetch the machinepw via ldapi in pdb_ads
      s3: Fix a potential memleak in secrets_fetch_trusted_domain_password
      s3: Fix auth_netlogond to cope with netlogon_creds_CredentialState
      s3: Add primary group in pdb_ads_enum_group_memberships
      s3: Only build auth_netlogond for the developer build
      s3: Use the right credentials in check_netlogond_security
      s3: Make "endpoint_table" static
      libcli/security: Make del_sid_from_array take a uint32_t
      libcli/security: Make add_sid_to_array_unique use a uin32_t counter
      s3: Fix some nonempty blank lines and some typos
      tevent: Fix typos
      s3: Fix some nonempty blank lines
      s3: Slightly simplify winbind_write_sock
      s3: Align tldap_add and tldap_add_send
      s3: Align the args in tldap_modify
      s3: Add more checks and better fallback to addrchange
      s3: Avoid a select call per smb
      s3: Skip the CHAIN1 tests
      s3: Make "smbpasswd <user>" work with pdb_ads
      tdb: Fix a C++ warning
      s3: Align the args of pdb_ads_update_sam_account to tldap_modify
      Fix some nonempty blank lines
      s3: Convert tldap_add_mod_blobs args to "array, count"
      s3: Convert tldap_add_blob_vals args to "array, count"
      s3: Convert tldap_make_mod_blob_int args to "array, count"
      s3: Convert tldap_make_mod_blob args to "array, count"
      s3: Convert tldap_make_mod_fmt args to "array, count"
      s3: Add an explicit counter to tldap_add_mod_[blobs|str]
      s3: Convert tldap_entry_values args to "array, count"
      s3: Fix some nonempty blank lines
      Fix typos
      s3: Remove an unneeded proto
      s3: Add error checking to asn1_read_OctetString_talloc
      s3: Use tlap_simple_recv in tldap_sasl_bind_recv
      s3: Make "net sam list [users|workstations]" list only the right things
      s3: Add "comment" and "description" to pdb_ads
      s3: Fix a typed-punned warning
      s3: Fix a C++ warning
      s3-amend: Don't overwrite existing values
      s3: Add userWorkstations and userParameters to pdb_ads
      s4: Fix a typo
      s3: Add "country_code" to struct samu
      s3: Pass "country_code" through samr
      s3: Support "country_code" in pdb_ads
      s3: Add "code_page" to struct samu
      s3: Pass "code_page" through samr
      s3: Support "codePage" in pdb_ads
      tevent: Fix a comment
      s3: Fix pdb_ads_pull_time
      s3: Let pdb_ads write accountExpires
      s3: Add "len" to pdb_set_hours
      s3: Pass logonHours through pdb_ads
      s3: Fix some nonempty blank lines
      s3: Slightly simplify Get_Pwnam_alloc
      s3: Convert init_system_info to NTSTATUS
      s3: NO_SUCH_USER is a lot more likely than NO_MEMORY
      s3: Make QueryDispInfo and QueryInfo match for guest
      s3: Add ACB_NORMAL to workstations, match RPC-SAMR
      s3: Fix return code of pdb_ads_getsamupriv if the user does not exist
      s3: Protect tldap_errstr against a NULL ld
      s3: Improve a debug message, we have more than pdb_tdb.
      s3: Fix error returns in pdb_ads_mod_groupmem
      s3: Fix pdb_ads_enum_group_members for empty groups
      s3: Fix a debug message
      s3: Support SetGroupInfo in pdb_ads
      s3: Fix pdb_ads_enum_aliasmem for empty aliases
      s3: Fix a typo
      s3: Fix some nonempty blank lines
      s3: Fix filtering in pdb_ads_search_users
      s3: Improve an error msg in vfs_gpfs
      s3: Fix an uninitialized variable use
      s3: Fix 64-bit errors
      s3: Fix a 64-bit warning in vfs_gpfs.c
      s3: Fix pdb_ads_enum_group_memberships args
      nss_wrapper: Make nwrap_module_init a bit more readable
      nss_wrapper: Fix a segfault when libnss_winbind.so is not loadable
      s3: Improve a dbg msg in aio_fork
      s3: Make is_zero_addr take a sockaddr_storage
      s3: Fix a debug message
      s3: properly find our standard nss_info backends
      s3: Use strndup in parse_nss_param
      s3: Fix some nonempty blank lines
      s3: Fix a comment
      s3: Fix a typo
      s3: Add timeval_to_msec
      libreplace: poll based on select
      s3: Add sys_poll
      s3: Use poll for the event loop
      s3: Use poll in smbd
      s3: Use poll in winbind
      s3: Use poll in nmbd
      s3: Remove select-based s3 event backend
      s3: Add poll_one_fd()
      s3: Eliminate select from packet_fd_read_sync
      s3: Eliminate sys_select from fd_is_readable
      s3: Eliminate sys_select from g_lock_lock
      s3: Add sys_poll_intr
      s3: Add poll_intr_one_fd
      s3: Eliminiate sys_select_intr from client.c
      s3: Eliminate sys_select_intr from read_fd_with_timeout
      s3: Eliminate sys_select_intr from smbfilter
      s3: Eliminate sys_select from do_smb_browse() -- untested
      s3: Eliminate sys_select from do_smb_resolve() -- untested
      s3: Eliminate select from libaddns
      libcli: Eliminate select from smb_readline_replacement
      tevent: Add a poll backend
      Remove sys_select[_intr]
      nsswitch: Eliminate select from wb_common
      s3: GPFS can't deal with mangled names
      s3: Attempt to fix the build on IRIX
      s3: Print all flags in "smbclient allinfo"
      s3: Fix operation names in vfs_full_audit.c
      s3: Pass smb_filename through the is_offline vfs op
      s3: Pass smb_filename through the set_offline vfs op
      s3: Announce HSM in the gpfs module
      s3: Ask GPFS for the IS_OFFLINE operation
      s3: Pass the aio_force operation through vfs_gpfs
      s3: Fix some nonempty blank lines
      s3: Remove an obsolete comment
      s3: Use dom_sid_string in _lsa_lookup_sids_internal
      Add dom_sid_string_buf
      s3: Use dom_sid_string_buf in sid_to_fstring
      s3: Fix a memory leak in check_sam_security_info3
      nsswitch: wbcFreeMemory deals fine with NULL
      libwbclient: Add wbcSidToStringBuf
      libwbclient: Use wbcSidToStringBuf
      pam_winbind: Use wbcSidToStringBuf
      s3-net: Use wbcSidToStringBuf
      wbinfo: Fix a debug message
      wbinfo: Use wbcSidToStringBuf
      Fix some nonempty blank lines
      s3: Fix uninitialized variables
      s3: Move EXOP definitions to smbldap.h
      s3: Remove unused args from get_nss_info
      s3: Remove unused args from nss_get_info
      s3: Remove unused args from nss_get_info_cached
      s3: Remove some unused code
      s3: Remove an obsolete comment
      s3: Remove an unnecessary if-statement
      s3-idmap-rid: private_data is a talloc child of dom
      s3-idmap-ldap: private_data is a talloc child of dom
      s3-idmap-tdb: private_data is a talloc child of dom
      s3-idmap-ad: Make ad_schema properly talloced
      s3: Replace idmap_ad_close by a destructor
      s3-idmap-hash: Make "hashed_domains" properly talloced
      s3: Remove close_fn from idmap_methods
      s3: state->ev is not needed in winbindd_lookupsid
      s3: "ctx" is not needed in idmap_nss_unixids_to_sids
      s3: "dom_name" is not needed in idmap_nss_sids_to_unixids
      s3: Use talloc_tos() in idmap_nss_sids_to_unixids
      libsmbclient: Fix a typo

William Brown (1):
      Added SSL global catalog

Zahari Zahariev (2):
      s4/ldapcmp: Two new options are added to the tool
      s4/wintest New ESXi configuration file

-----------------------------------------------------------------------


-- 
Samba Shared Repository


More information about the samba-cvs mailing list