[SCM] Samba Shared Repository - annotated tag ldb-1.1.4 created

Stefan Metzmacher metze at samba.org
Sat Jan 21 01:51:34 MST 2012


The annotated tag, ldb-1.1.4 has been created
        at  a58c0fdbddbb7f3d44c1c7406208b9d142559097 (tag)
   tagging  91c5bd23a76340d9642f7d318bce6ca3f15b2dc9 (commit)
  replaces  ldb-1.1.3
 tagged by  Stefan Metzmacher
        on  Sat Jan 21 09:51:27 2012 +0100

- Log -----------------------------------------------------------------
ldb: tag release ldb-1.1.4
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAABAgAGBQJPGnyPAAoJEEeTkWETCEAlfqQIAISBxdQsxVKncnJBGbKHXQrZ
db67kJ2K1Re1S73HgEMadXSl3/0zR2auD1lh67++tnkgmTVHDpVHd5nrdAwhoBNB
B5tIvJK3WXn5W3fP8ZSJL1MhPxX/0ASJsQnQqWiN0xuKXi8T1sWolg7VorFbYh5R
G9ItpdDaAe0ZZz1fK/hCa+9s1jWgESEz/RtRUn+W016QlFlQi8kEtnT3yhX6u5fR
dXoOlOTRtmB/zr4fhgj0JCbX8Mbk0u34nWT6vp6LaXYtWXPVygEMeRm1KgoRq8Mb
zqVo0s5uJvPVF8kSf0fgIQdujWVhMS83N3l6ayRltebWmNqZoS8zApdj59bYpNI=
=pbs+
-----END PGP SIGNATURE-----

Amitay Isaacs (58):
      dnsp: Added typedefs to interpret dnsProperty attribute for dnsZone objectclass
      ldb-samba: Added handler to decode dnsProperty attribute
      s4-dns: Added more data types for dnsserver implementation
      s4-dns: Added support for multiple DNS_RPC_RECORDS structures
      werror: Added missing DNS error codes
      s4-provision: Provision DNS records with correct rank
      s4-dns: Added DCERPC dns server for DNS management
      samba-tool: Added dns command for DNS management
      s4-selftest: Add tests for RPC dnsserver
      s4-dns: Update serial number for zone on dns updates
      ldb: ldb_errstring() takes ldb_contxt as an argument
      samba-tool: Enable comparison of DNS naming contexts in ldapcmp
      samba-tool: Improve the description of dns subcommands.
      s4-dnsserver: Set DNS_DP_AUTOCREATED flag for the zone information
      s4-dnsserver: Compare two dns names using last uncommon name components
      s4-dnsserver: List dns zones matching the search filter
      s4-dnsserver: Build a dns name tree for correct enumeration
      s4-dnsserver: Handle the case when the dns name is NULL
      s4-dnsserver: Check the raised exception with assertRaises
      s4-drepl: Search for application partitions in addition to main ones
      dsdb: Handle the case when extended rights string is NULL
      s4-dnsserver: Fix enumeration of zones in ComplexOperation RPC call
      s4-dnsserver: Test forward zones are not listed in reverse zone search
      param: Remove duplicate initialization of 'share backend' parameter
      s4-provision: site is passed as an argument to setup_ad_dns()
      s4-provision: Set security descriptor for DNS records
      s4-provision: Create ldap records for DNS partitions similar to windows
      py_passdb: Cannot steal an item pointer from an array
      s3-s4-upgrade: do not add description if it is empty string or none
      provision: Set the security descriptor while creating partitions
      param: Add "domain logons" and "domain master" parameters
      s3-param: Add "server role" as global parameter
      roles: Add ROLE_AUTO to indicate that the server role is calculated
      py-param: Add python interface to get server_role
      param: Check if server role and security parameters are conflicting
      s4-dsdb: Remove unsed variable
      ldb: Add handy macros for reporting error inside ldb module
      socket_wrapper: Added python interface to socket_wrapper
      s4-s3-upgrade: Fix the minimum and maximum password age calculation
      samba-tool: Fix the domain account policy max_pwd_age calculation
      s4-s3-upgrade: Fix idmap types ID_TYPE_UID/ID_TYPE_GID instead of UID/GID
      s4-s3-upgrade: Add --verbose option to print extra details
      s3-passdb_test: Policy values are converted to signed integer
      dsdb: Fix the password expiry calculation
      s3-py-passdb: Fix handling of uninitialized gid values
      s4-dsdb: Remove LDB_SEQ_HIGHEST_TIMESTAMP sequence number support
      s4-dsdb: Return ldb_result context in dsdb_module_extended
      s4-dsdb: use dsdb_module_extended instead of duplicate code
      s4-dsdb: Added metadata to partition module for global sequence number
      s4-samdb: seqence_number() operation must be in a transaction
      s4-test: Remove metadata and ldb.d directory on clean up
      s4-provision: Extract security descriptors in separate file
      s4-provision: Create a samdb copy for access by dlz_bind9 module
      dlz_bind9: Use the sam database in dns/ as default
      dlz_bind9: Added access check to verify dynamic update
      s4-provision: Make BIND9_DLZ as the default backend for DNS
      s4-repl: Check if GC SPN exists before using it for replication
      s4-provision: Fix the security ace for DnsAdmins group on DNS records

Andreas Schneider (28):
      selftest: Fix plugin_s4_dc configuration.
      s3-netlogon: Fix setting the machinge account password.
      replace: Make sure we compile without uid_wrapper.
      replace: Add checks for setreuid and setregid.
      uid_wrapper: Fix prototypes.
      uid_wrapper: Make sure we have initialized the wrapper.
      uid_wrapper: Handle euid and egid 0.
      uid_wrapper: Fix build on UNIX platforms.
      uid_wrapper: Add uwrap_setresgid().
      nsswitch: Disable uid_wrapper in libwbclient.
      s3-waf: Don't link uid_wrapper more than once.
      Include uid_wrapper correctly.
      s3: Include uid_wrapper where it is missing.
      replace: Add don't include unistd.h directly and add uid_wrapper.
      s3: Enable uid wrapper.
      s3-build: Add .clang_complete.
      s4-torture: Add domain_handle to test_join struct.
      s4-torture: Add torture_delete_testuser().
      s4-torture: Add a samr privilege check.
      s4-torture: Add a user creation check.
      Add systemd service files.
      systemd: Fix dependencies.
      s3: Use autotools to set the winbind socket directory.
      docs: Make clear to use the workgroup name not the realm.
      s3-winbind: Increase the negative cache entry timout.
      s3-winbind: Make sure the map is clean.
      s3-winbind: Don't fail on users without a uid.
      s3: Fix wbinfo socket dir path.

Andrew Bartlett (128):
      lib/param move source4 param code to the top level
      libcli/smb Move CSC_POLICY_* definition to smb_constants.h
      lib/param: Remove unused #include of lib/socket/socket.h
      lib/param Avoid the use of the name service_ok() which is used in the s3 param code
      lib/param Avoid the name string_set as this is already used in the s3 param code
      lib/param Use talloc_strdup rather than strdup as strdup is banned in the s3 includes.h
      lib/param Use strcasecmp_m rather than strcasecmp as this is banned in the s3 includes.h
      lib/param Avoid dyn_ defines that are not provided by the autoconf build
      s4-s3-upgrade: Allow import (just without a uid mapping) where getpwnam fails
      auth: move credentials layer to the top level
      auth: move gensec_start.c to the top level
      auth/credentials Declare remaining functions are public interfaces and put into credentials.h
      gensec: trim header includes back to what is actually required
      build: use lib/param loadparm code in source3 to get at lpcfg_ functions
      lib/param Add 'use mmap' parameter to control tdb use of mmap
      lib/param Print error when mkdir of lock path fails
      libcli/auth: Provide a struct loadparm_context to schannel calls
      s4-messaging: Pass the loadparm context, not just the messaging path
      lib/util: Add back control of mmap and hash size in tdb for top level build
      lib/param reduce the cost of loadparm_init_s3()
      build: only regenerate param files when required
      build: clean new generated param headers
      build: run perl generators at autogen.sh time
      add lib/param files to .gitignore
      Revert "s4:selftest: skip flakey samba4.nbt.winsreplication for now"
      Revert "s4: Mark the winsreplication test as knownfail"
      s4-selftest When testing for a credentials cache, do not specify a domain
      credentials: Prioritise command-line specified options above defaults from smb.conf
      s3-auth Add my copyright
      s4-s3-upgrade: Give a better clue when we cannot open secrets.tdb
      build: compile gensec_start.c and credentials.c in the autoconf build
      ntlmssp: Move ntlmssp code to auth/ntlmssp
      ntlmssp: Prepare gensec_ntlmssp_start() for broader use
      ntlmssp: Put members from auth_ntlmssp_state into gensec_ntlmssp_state
      gensec: an event context is no longer mandetory
      s3-ntlmssp Implement the server-side auth_ntlmssp code as a GENSEC module
      s3-smbd Give the nt error string when failing to set up encrypted transport
      gensec: Assert that we have not been subject to a downgrade attack in DCE/RPC clients
      s4-auth: match the new s3 gensec client and always negotiate SIGN with SEAL
      gensec: Refuse to seal if we did not negotiate to sign
      ntlmssp: Refuse to seal if we did not negotiate to sign
      gensec: move event-using code to gensec_update() hooks out of gensec_start*()
      s3-auth fix comment after s3 ntlmssp gensec module
      gensec: move event context from gensec_*_init() to gensec_update()
      s3-auth: use typedefs in auth.h
      ldb: Output more error information when a connect fails
      lib/param: Remove parameters for wins and spoolss databases
      s3-rpc_client remove cli_auth_ntlmssp_data_destructor
      s3-ntlmssp split auth_ntlmssp_client_start() into two parts
      s3-libsmb Use a gensec module to provide the ntlmssp client in ntlmssp_wrap.c
      s3-auth move the s3 auth context onto gensec_ntlmssp once we start
      s4-smb_server do not set credentials on gensec twice
      s4-s3-upgrade Fix samba3upgrade code to cope with a missing wins.dat
      s4-s3-upgrade test upgrade without a wins.dat
      s4-s3-upgrade fix format string for secrets.tdb exception
      s4-s3-upgrade rename samba-tool domain samba3upgrade --libdir to --dbdir for clarity
      Revert "selftest: Avoid being run over by armies of the undead"
      examples: compile libsmbclient tests using just SAMBA_BINARY
      s3-netapi Compile (but do not install) netapi tests
      build: compile (but do not install) all the libsmbclient tests
      build: compile (but do not install) netapi examples
      s3-auth remove auth_ntlmssp_session_info()
      s3-ntlmssp Remove auth_ntlmssp_update wrapper
      s3-ntlmssp Remove auth_ntlmssp_negotiated_sign() and auth_ntlmssp_negotiated_seal()
      s3-ntlmssp use gensec_{seal,unseal,sign,check}_packet
      s3-seal use gensec_[un]wrap() instead of gensec_[un]seal_packet()
      s3-ntlmssp Remove auth_ntlmssp_want_feature()
      s3-ntlmssp Remove auth_ntlmssp_session_key()
      s3-ntlmssp Remove references to auth_ntlmssp_context from the smb sealing code
      s3-seal Remove struct smb_srv_trans_enc_ctx
      s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc code
      lib/util/charset Remove unused header smb_common.h
      libcli/smb Move smb_seal.h include to files that use it.
      torture: Remove unused smbiconv
      build: always include talloc with <talloc.h>
      build: always include tevent with <tevent.h>
      examples: rework wscript to use a loop
      s3-torture remove unused t_asn1.c
      s3-torture remove unused t_push_ucs2.c t_strcmp.c t_strstr.c
      selftest: Remove --target option and the ability to run 'samba4 only' tests
      selftest: Have only one set of selftest knownfail and skip files
      s3-torture Fix t_strappend test
      s3-torture Run t_strappend test for less time
      s3-torture run t_strappend tests as LOCAL-sprintf_append
      s3-selftest: Add LOCAL-sprintf_append
      s3-torture Remove t_stringoverflow as fstrcpy now uses strlcpy
      s3-build: Remove libbigballofmud.so
      s3-selftest Add all the LOCAL-* smbtorture tests to make test
      gensec: Add parinoia about integer wrapping
      lib/util Rename init_module_fn to samba_init_module_fn
      lib/util Rename run_init_functions -> samba_init_module_fns_run
      lib/util Rename load_samba_modules -> samba_modules_load
      lib/util Split samba-modules library into public and private parts
      lib/util Rename samba_init_module_fn -> samba_module_init_fn
      lib/util Rename samba_init_module_fns_run -> samba_module_init_fns_run
      lib/util Rename samba_init_module -> samba_module_init
      lib/util Rename samba_modules_load -> samba_module_init_fns_for_subsystem
      lib/util Add ABI to the samba-module library
      s4-dsdb Remove LDAP backend credentials support
      selftest: Remove the 'all' environment as it is just too slow to start up
      s4-smb_server No longer follow the security=share smb.conf directive
      s4-s3-upgrade Add my copyright
      s4-provision Remove options for LDAP backend to reduce user confusion
      s3-passdb Initialise the correct level of pointer dereference
      s3-py_passdb Ensure that group mapping list input is initailised
      s4-setup Remove servicePrincipalName: DNS/${DNSDOMAIN} from new installations
      param: make server role list common and include auto (for the new default)
      s3-param remove lp_domain_logons(), always use IS_DC
      param: calculate server role from security, and security from server role
      s4-s3-upgrade Add test of net getlocalsid after the upgrade
      param: move server role helpers into loadparm.h
      param: Move enum values into a common (included) .c file
      param: Add tests for automatic server role guessing
      s4-provision permit server role to be the ROLE_ strings from s3
      param: Connect lp_security to the lib/param code to allow tests
      lib/param: Add tests for security= behaviour now it operates with server role
      param: use lp_is_security_and_server_role_valid()
      libds: Make server role values explicit for easier debugging
      docs: Add documentation for server role
      lib/param simplify server role values specified in smb.conf
      s3-net Do not look for a local SID when we are a DC
      s4-s3-upgrade Test getdomainsid as well
      s3-nmbd Remove AD netlogon response from s3 nmbd server
      s4-s3-upgrade now look for -1 as the special 'not set' value
      s4-auth log details about any token we fail to convert to a unix token
      s4-samba-tool: Add --principal argument to samba-tool domain exportkeytab
      build: TDB_ERR_NESTING is used unconditionally
      s4-kdc: Add hdb plugin for samba4, to allow kadmin to work

Andrew Tridgell (22):
      libsmbclient: add ABI checking and pc file
      libsmbclient: initial ABI signatures
      ldb: fixed a race in ldb initialisation
      build: added deletion of stale .so and .o files
      dsdb: improve debug message
      subunitrun: give more useful help
      s4-dsdb: moved dsdb_Dn() into common.py
      s4-test: added test suite for common.py code
      build: explain the passing of make options to waf
      kcc: fixed tabs/spaces in kcc python implementation
      kcc: fixed program name
      s4-socket: detect NULL server in socket connection code
      s4-test: improved error checking in samba-tool time test
      pyldb: enhanced get() method on msg object
      build: only run symbol checking if running all tests
      pyldb: fixed ldb API test
      test: added -D option to subunitrun
      test: added directory option to planpythontestsuite()
      test: use planpythontestsuite() for ldb.python test
      samba-tool: print samaccountname in samba-tool user list
      test: fixed several tests to use samba.tests
      s4-dns: added --no-credentials option to samba_dnsupdate

Björn Baumbach (18):
      s3-utils: add capabilities to dbwrap_tool
      s3-util: dbwrap_tool: add store hex function
      s3-util: dbwrap_tool: add fetch fuctions for hex and string
      s3-util: dbwrap_tool: fix fetch_string function
      s3-printing: fix typo
      s3-utils: net - Fix one error/usage message
      s3-registry: fix upgrade code
      s3-build: add bin/dbwrap_tool to the BIN_PROGS2 dependencies
      s3-selftest: introduce registry upgrade test
      s3-selftest: add new registry upgrade test to test list
      s3-build: Fix inotify detection (bug 8580)
      s3-wafbuild: Fix inotify detection (bug 8580)
      s3-libsmb: introduce option to disable dos error mapping
      s3-torture: replace cli_errstr() with nt_errstr()
      s3-torture: remove all cli_nt_error() calls in torture
      s3-libsmb/clidfs.c: remove cli_nt_error()
      s3-winbindd/winbindd_cm.c: remove cli_nt_error()
      s3-libsmb/passchange.c: remove some cli_nt_error() calls

Björn Jacke (3):
      s3/doc: add man page for aio_fork vfs module
      s3:Makefile: make DSO_EXPORTS_CMD more portable (#8531)
      s3: allow to set TCP_NODELAYACK socket option on AIX

Brad Smith (1):
      Fix sys_fseek wrapper

Christian Ambach (16):
      s3:smb2_create: fix allocation size return value when opening existing files
      Revert "s3:idmap/autorid add a small alloc pool to autorid"
      s3:winbindd/idmap make idmap modules loadable again
      s3:idmap_autorid: use strings as parameter for range allocator
      s3:idmap_autorid: move HWM initialization into a function
      s3:idmap_autorid: add an allocation range to autorid
      s3:idmap_autorid: document allocation pool
      s3:smbd increase a debug level
      s3:docs: some corrections for wbinfo
      s3:docs fix a series of typos in wbinfo manpage
      s3:vfs:gpfs convert syncio parameter
      s3:vfs:gpfs fix some compiler warnings
      s3:vfs:gpfs remove non-working code
      s3:smb2 do not set allow_namespace_caching flag for a share
      s3:smb2 report access_based_dir_enum in tcon reply
      security: add local authority well-known SIDs

Dave Craft (3):
      python dsdb flag addtions (NTDSSETTINGS, NTDSCONN)
      add python KCC utility classes and methods
      samba_kcc addtion

David Disseldorp (13):
      libcli: move ioctl function field defs to smb_constants
      s3: Remove duplicate fsctl function definitions
      libcli: Move smb2 fsctl fn defs into common code
      s3: remove duplicate fsctl fn definitions
      s3: fix typo in net ads join output
      idl: add copychunk and request_resume_key ioctl definitions
      s4-torture: Add tests for the smb2 copychunk ioctl
      s4-torture: split common copychunk ioctl test code into helpers
      s4-torture: add smb2 copychunk ioctl tests
      s4-torture: smb2 copychunk data integrity checks
      s3:smb2_server: remove unused outhdr variables
      ldb: fix compiler warning
      pkg: add comments to the systemd sysconfig file

Frank Lahm (2):
      Add support for VFS op streaminfo chaining in all relevant VFS modules.
      First part of fix for bug #8419 - Make VFS op "streaminfo" stackable.

Geza Gemes (1):
      s4:wscript - install the two missing files "dlz_bind9.so" and "named.conf.dlz"

Giampaolo Lauria (17):
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Improve getopt.py error handling
      samba-tool: Fix "delegation show" command  synopsis
      samba-tool: Improve "delegation" command error handling
      samba-tool: Improve "delegation" command error message
      samba-tool: Improve "delegation" command error handling
      samba-tool: Fix --quiet option in domain samba3upgrade
      samba-tool: Fix short description and error msgs in domain level
      samba-tool: Fix domain machinepassword name search
      samba-tool: Fix domain machinepassword secret db search
      samba-tool: Change internal argument name in domain machinepassword
      samba-tool: Added "user list" command
      samba-tool: Added new "user disable" command
      samba-tool: Remove "domain machinepassword" command
      samba-tool: Don't set UF_PASSWD_NOTREQD flag on "user disable"

Gregor Beck (40):
      s3:dbwrap: add function dbwrap_exists()
      s3:dbwrap: add specific dbwrap_exists() implementation to dbwrap_tdb
      s3:dbwrap: factor out db_rpt_search_internal()
      s3:dbwrap: add specific dbwrap_exists() implementation to dbwrap_rbt
      s3:dbwrap: add function dbwrap_parse_record()
      s3:dbwrap: dbwrap_parse_record() should always return -1 on "not found"
      s3:dbwrap: allow NULL parser for dbwrap_parse_record()
      s3:dbwrap: implement dbwrap_fallback_exists() with dbwrap_parse_record()
      s3:dbwrap: add specific dbwrap_parse_record() implementation to dbwrap_rbt
      s3:dbwrap: add function dbwrap_wipe()
      s3:dbwrap: add specific dbwrap_wipe() implementation to dbwrap_tdb
      s3:dbwrap: add specific dbwrap_wipe() implementation to dbwrap_rbt
      s3:dbwrap: fix db_rbt_traverse() to return the record count on success
      s3:smbcacls pretty print acl control field
      s3:smbcacls get_domain_sid for sddl parsing/formating from lsarpc
      s3:smbcacls add option domain-sid
      s3:smbcacls fix possible SEGFAULT
      s3:smbcacls fix leaking talloc stackframce on tcon failure
      s3:dbwrap: traverse records created within this transaction.
      s3:dbwrap: remove m_all marshall buffer from ctdb transaction.
      s3: fix id_cache_kill to delete the the id-mappig from caches
      s3: factor out messaging_send_to_children()
      s3:smbcontrol: let smbd pass the idmap msg to its children for convenience
      s3:utils change data_blob_dup_talloc() to take a DATA_BLOB by value
      s3:registry add function srprs_hive()
      s3:net: factor out interact_edit()
      s3:net: add command registry check
      s3:doc manpage for "net registry check"
      s3:net: avoid unnecessary initialization of the registry.
      s3:smbcacls: fix violation of coding conventions
      s3:net registry check: do not silently replace separators
      s3:net registry check: fix a case where automatic and read only mode take the wrong action
      s3:net registry check: improve console output
      s3:lib fix output of hex escapes > 0x7F with cbuf_print_quoted
      s3:dbwrap: do not burden the user of db_open_ctdb with ifdef voodoo
      s3:registry: write INFO/version if we create registry.tdb
      s3:dbwrap_torture: code cleanup
      s3:net registry check: handle missing version info
      s3:net registry check: adapt to new semantic of dbwrap_fetch
      s3:net registry check: adapt to new semantic of dbwrap_fetch with rbt

Gémes Géza (1):
      Add a --random-password option to user create command.

Günther Deschner (87):
      s3-net: when all DNS servers fail to operate, the overal DNS registration result
      s3-passdb: split out passdb/pdb_tdb.h.
      s3-passdb: split out passdb/pdb_wbc_sam.h.
      s3-passdb: split out passdb/pdb_smbpasswd.h.
      s3-smbldap: rearrange prototypes a bit.
      s3-passdb: split out passdb/pdb_ldap.h.
      s3-passdb: split out passdb/pdb_nds.h.
      s3-passdb: split out passdb/pdb_ipa.h.
      s3-waf: fix configure check for HAVE_POSIX_FADVISE.
      s3-waf: fix configure check for HAVE_LINUX_FALLOCATE.
      s3-waf: fix configure check for HAVE_LINUX_FALLOCATE64.
      s3-waf: fix configure check for HAVE_LINUX_READAHEAD.
      s3-waf: make sure we build example vfs modules with --enable-developer.
      s3-groupdb: split out groupdb/mapping_tdb.h.
      s3-dbwrap_ctdb: fix the build.
      s3: remove some dead prototypes.
      s3-auth: token_util needs system/passwd.h.
      s3-passdb: move group mapping headers into passdb.h
      s3-passdb: move passdb prototypes into passdb.h
      s3-passdb: use uintX_t at least in headers.
      s3-passdb: add {LM|NT}_HASH_LEN defines in passdb.h.
      s3-passdb: add define guards for machine_sid.h.
      s3-passdb: remove fstring from pdb_set_user_sid_from_string().
      s3-passdb: remove libwbclient header dependency for passdb/lookup_sid.h.
      s3-waf: install passdb headers.
      s3-net: Fix uninitialized variable in rpc_conf_import_internal().
      s3-auth: fix the build of skel auth example module.
      s3-waf: make sure we always build example auth modules with --enable-developer.
      s3-auth: remove dead prototype.
      s3-passdb: fix the build of example pdb test module.
      s3-waf: make sure we always build example pdb modules with --enable-developer.
      s3-docs: Document Services for Unix 2.0 (sfu20) nss_info ldap schema support.
      s3-docs: Add a clarification note for nss_info primary group membership calculation.
      s3-waf: make sure we always compile (not install) our libsmbclient testcode.
      s3-netapi: fix missing include in examples code.
      s3-netapi: use NetApiBufferAllocate() for returned buffer in getdc calls.
      s3-waf: only compile common.c in netapi examples code once.
      libcli: remove unneeded com_err.h and fix the build here.
      s3-docs: Remove -Y option from winbind manpage.
      s3-libsmbclient: make some functions static in testsuite code.
      s3-netapi: remove pointless use_memory_krb5_ccache.
      s3-smbldap: use tevent_context in smbldap.
      s3-passdb: use tevent_context in passdb.
      s3-net: Make sure to always re-use the "good" dc for the DNS updates as well.
      s3-waf: fix libgpo.so library name.
      s3-libnet: add ads forward declaration in libnet keytab code.
      s3-waf: convert libnet_keytab into a private library.
      s3-trustdomcache: make enumerate_domain_trusts() static.
      s3-waf: move trusts_util.c code into a private library.
      s3-waf: convert libcli_netlogon3 into a private library.
      librpc: only let NDR_NBT depend on NDR_NBT_BUF.
      librpc: remove nbt dependency to samr.
      librpc: remove nbt dependency to svcctl.
      nbt: merge in LIBCLI_NDR_NETLOGON helper into NDR_NBT.
      nbt: move nbt_string ndr functions to ndr/ndr_nbt.c helper.
      s4: add some missing header dependencies.
      nbt: trim down header dependencies of nbt.idl.
      nbt: move netlogon_samlogon_response into librpc/ndr/ndr_nbt.h.
      nbt: create standard ndr_pull/push interface for common netlogon samlogon replies.
      waf: convert NDR_NBT into shared library.
      torture: add torture_assert_guid_equal() macro.
      s4-smbtorture: add some ndr validation tests for netlogon_samlogon_response structs.
      s4-smbtorture: demonstrate how broken our samr_ChangePasswordUser3 marshalling is...
      samr: filterModuleName is a lsa_String in userPwdChangeFailureInformation.
      s3-modules: remove the last "init_module" traces.
      s4-smbtorture: add spoolss_OpenPrinterEx ndr test with full devmode.
      s3-smbldap: use include/smb_ldap.h in smbldap.h
      s3: move smbldap_util to pdb_ldap_util.
      s3-passdb: split out passdb/pdb_ldap_schema.c
      s3-net: use better state variable name for smbldap_state.
      s3-smbldap: remove duplicate prototype of smbldap_init().
      s3-smbldap: extend smbldap_init() with binddn/bindsecret arguments.
      s3-smbldap: remove dependency to secrets subsystem.
      s3-waf: create a smbldap.so library.
      s3-smbldap: remove duplicate prototype.
      s3-smbldap: improve smbldap.h readability and rearrange some defines.
      s3-param: loadparm has no dependency to smbldap.
      s3-smbldap: include talloc.h and tevent.h in smbldap.h
      s3-winbindd: no need to globally include ldap headers in winbindd.
      s3-smbldap: remove duplicate LDAP_OPT_SUCCESS define.
      s3-smbldap: move ldap_open_with_timeout out of smb_ldap.h to ads where it lives.
      s4-smbtorture: add ndr test for nbt_netlogon_packet to avoid future regressions.
      s3-waf: remove version from libpdb.so for now.
      librpc: install drsuapi and drsblobs headers.
      s3-rpcclient: add tool to call lsa_SetInformationTrustedDomain.
      s3-passdb: make pdb_password_change_time_max static.
      s3-waf: fix the build with CTDB_CONTROL_CHECK_SRVIDS.

Henry Wong (1):
      Properly fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.

Jelmer Vernooij (88):
      param: Expose lpcfg_smb_ports, required by winexe.
      s4/param: Expose lpcfg_smb_ports and lpcfg_socket_options, which are both required by winexe.
      samba.getopt: Allow --kerberos=auto, and fix exception name if an unknown
      samba.upgrade: Use list comprehension.
      samba-tool/testparm: Fix handling of command-line options.
      samba-tool/testparm: Fix traceback when checking client name/ip against hosts allowed.
      netcmd: Add errf stream to command instances.
      netcmd: Add Command.get_logger() method.
      samba-tools/testparm: Add really basic unit test, demonstrating how to write unit tests for samba-tool in Python.
      samba.getopt: Refactor parsing of --kerberos argument into separate function.
      samba-tool delegation: Use self.outf, simplify some code.
      samba-tool: Use self.outf in a few more places.
      Update to newer version of subunit.
      python: Remove extra newlines.
      creds: Remove unnecessary calls to credopts.get_credentials.
      samba-tool: Determine long option from docstring.
      CodingStyle: Add some notes about Python 2.4 compatibility.
      samba.netcmd: Reintroduce Command.name.
      samba-tool: Don't require full prog line to be in synopsis.
      samba-tool: Move main command implementation to samba.netcmd.main, so it is accessible by the testsuite.
      samba-tool: Add test to make sure all commands have a synopsis set.
      samba-tool: Add test to make sure all commands have a short description set.
      samba.getopt: Keep exception message when setting a lp option fails.
      samba.getopt: Add some basic tests.
      Simplify handling of user add command.
      samba.common: Fix formatting of docstring (trips up pydoctor).
      s4-python: samba.provision: Require schema to be passed in - code path which handles schema not being specified is broken anyway.
      pyldb: Remove duplicate definition of SYNTAX_DN.
      samba.netcmd: Pass in outf/errf.
      Some formatting fixes, remove unused imports.
      util/time: Remove unnecessary _PUBLIC_ - that's implicit for things in header files.
      util/time: Make some functions explicitly public.
      samba_kcc: Remove unnecessary return statements.
      s4: Install samba-tool and samba_kcc to bin/ rather than sbin/.
      Revert "pyldb: fixed ldb API test"
      Revert "test: added -D option to subunitrun"
      Revert "test: added directory option to planpythontestsuite()"
      selftest: re-implement directory option for planpythontestsuite.
      subunitrun: Add notes about subunitrun being deprecated.
      ldb: Re-apply pyldb fixes from Tridge and Amity, using unittest rather
      selftest: Allow passing arbitrary number of additional python path values.
      selftest: Simplify calling of python tests.
      selftesthelpers: Fix syntax error.
      selftest: Make planoldpythontestsuite arguments consistent with planpythontestsuite.
      selftesthelper: Fix argument order.
      policy/tests: Fix import of TestCase.
      upgrade: use logger.warning.
      waf: Don't link python modules against libpython2.x, consistent with other Python modules.
      pytalloc-util: Don't mark as python extension, use pyembed instead.
      tevent: remove unnecessary enablement.
      ldb: Use pyembed rather than pyext for ldb-util library.
      tevent: Only build pytevent if the system doesn't provide it.
      wafsamba: add CHECK_BUNDLED_SYSTEM_PKG function.
      subunit: Only check for pkg-config file and use proper pkg-config file name.
      talloc: Only check for pkg-config file when checking for system talloc.
      tdb: Only check for pkg-config file when checking for system tdb.
      tevent: Only check for pkg-config file when checking for system tevent.
      ldb: Only check for pkg-config file when checking for system ldb.
      wafsambaa: Support libraries that don't have the same name as their pkg-config file.
      wafsamba: Support allow_undefined_symbols in SAMBA_SUBSYSTEM.
      subunit: Import new upstream snapshot.
      testtools: Import new upstream snapshot.
      pytdb: Shorter description which fits on a single line.
      Revert 9a5ae8edd6d006c078b3af8fdfd84677a63276b1.
      waf: Simplify handling of python modules.
      waf: Factor checking for undefined symbol flags out into separate method.
      Move testr configuration to root.
      selftesthelpers: Cope with empty binary mappings list, simplify handling of perl.
      waf: Fix uselib_store for system libsubunit.
      Remove broken code - these lines use undefined symbols.
      subunitrun: Don't load smb.conf when just listing tests.
      s4-tests: Allow listing tests run for iconv.
      s4-tests: Remove unnecessary py suffix.
      s4-tests: Use plansmbtorturesuite where possible.
      selftesthelpers: Revert perl changes, add comment on why the original code was necessary.
      Fix default value for subunitrun --list.
      samba.tests: Make sure testtools is available before importing it.
      samba.tests.dsdb: Import TestCase from samba.tests.
      selftesthelpers: write warnings to stderr rather than stdout.
      selftest: Don't write subunit output in --list mode.
      selftest: Don't use fancy subunit formatters when generating a test list.
      s4-testlist: Write diagnostic info to stderr, and purely test info to stdout.
      testr: Use test lists.
      s4-tests: Use long option names in test list script, to prevent 'eating' --list argument when e.g.  is not set.
      selftest: Prevent error about unfinished test command when using --list.
      selftest: Don't generate subunit file when writing subunit to stdout.
      Bump ldb version to 1.1.4 after introduction of ldb_module_error.
      Update ldb API sigs.

Jeremy Allison (77):
      Fix the VFS for fsctl.
      Add new contributing FAQ announcing acceptance of corporate (C).
      Fix bug #8521 - winbindd cache timeout expiry test was reversed
      Another part of the fix for Bug 8473 - smb2_find uses a hard coded max reply size of 0x10000 instead of smb2_max_trans.
      Fix const warning.
      Fix const warnings.
      Fix const warnings.
      Fix printf warning.
      Remove unused function.
      Removed unused variable.
      The last argument to atalk_build_paths() is always false, remove it.
      vfs_netatalk should be using strstr_m, not strstr to find .AppleDouble paths.
      Make use of the "dir_exists" we already have on directory open.
      Fix error return to be NT_STATUS_NOT_A_DIRECTORY.
      Fix a boatload of warnings in the examples.
      Make mkdir_internal() check the parent ACL for SEC_DIR_ADD_SUBDIR rights.
      Refactor to create check_parent_access() which can be called for file creation too.
      Deprecate "acl check permissions".
      Fix bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Second part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Third part of fix for bug #8541 - readlink() on Linux clients fails if the symlink target is outside of the share.
      Try and fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.
      Second attempt to fix bug #8384 - Windows XP clients seem to crash smbd process every once in a while.
      Add early return on stat open without O_CREAT if file doesn't exist.
      Remove another level of indentation - deal with !NT_STATUS_OK individually.
      Factor out the code checking if a parent should override DELETE_ACCESS into a function.
      Make smbd_check_open_rights() static.
      Move parent_override_delete() to before I need to use it.
      Simplify smbd_check_open_rights() and move all the special casing inside it.
      Finally do all the open checks inside open_file(). Checks inside
      Remove unused "struct security_descriptor" parameter from check_parent_access()
      Remove the mkdir and open functions from the ACL modules - main code paths now handle this.
      The xcopy test requires "dos filemode=yes" as it opens with WRITE_OWNER.
      Remove the order dependency in parent_override_delete(), just check for & not ==.
      The xcopy test is used in unusual ways (via a different uid). Ensure we can cope with this.
      Fix bug #8548 - winbind_samlogon_retry_loop ignores logon_parameters flags.
      Change function signature of check_parent_access() to take char * instead of struct smb_filename.
      Call check_parent_access() on readdir.
      Remove opendir() VFS code from ACL modules.
      Fix bug #8562 - talloc: double free error.
      Revert "Call check_parent_access() on readdir."
      Revert "Change function signature of check_parent_access() to take char * instead of struct smb_filename."
      smb1_file_se_access_check() is now static to smbd/open.c
      Move root check out of smb1_file_se_access_check() in preparation for deleting this function.
      Replace smb1_file_se_access_check() with just se_access_check().
      Rename smbd_check_open_rights() to smbd_check_access_rights() as we're going to remove the static from this.
      Expose smbd_check_access_rights() to other modules.
      Add const to the smb_filename argument of smbd_check_access_rights().
      Remove can_access_file_data() - make it use the standard smbd_check_access_rights() instead.
      Remove can_access_file_acl(). We no longer need this duplicate code (hurrah!).
      No longer do the pre-check on DELETE_ACCESS - we're correctly checking the ACL every time now.
      can_write_to_file() does now take share permissions into account. Fix comment.
      Move the SEC_DIR_LIST check into dptr_create for SMB2 and now for SMB1.
      Add the SEC_DIR_LIST check to dptr_create().
      Remove unneeded NULL check.
      Ensure we correctly calculate reply credits over all returned
      Fix bug #8561 - Password change settings not fully observed.
      Move handle based access check into handle code path.
      Remove unneeded access check. This is done inside smb_set_file_size().
      Remove unneeded access check. This is done inside smb_set_file_time().
      We've already checked fsp must be non-null here.
      Move handle-based access check into handle codepath.
      Always set the attribute first, before the time.
      Remove the check for FILE_WRITE_ATTRIBUTES from smb_set_file_time(). It
      Final part of patchset to fix bug #8556 - ACL permissions ignored when SMBsetatr is requested.
      Remove rawmemchr calls - found by Ira Cooper. These are glibc-specific calls, makes us completely non-portable.
      Fix a bunch of "warning: variable ‘XXXX’ set but not used [-Wunused-but-set-variable]" warnings from the new gcc.
      Move the add security descriptor code to *after* all the other meta-data is
      Only add the SD if it's not a new stream file.
      Move the "set SD" code into provided SD and "inherit acls" branches.
      Move setting the inherited ACL into the main open code path. Next will
      Remove the setting of the inherited ACL on new files/directories. This is
      Ensure we don't free uninitialized variables.
      Fix uninitialized variable frees on error paths.
      Remove unused variable.
      Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and from a DACL
      Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field.

Kai Blin (23):
      s3 waf: Use upper case uselib_store parameter, otherwise the following checks won't find it
      s4 provision: Rename bind9 flatfile backend to BIND9_FLATFILE
      s4 provision: Reword opinionated dns backend help text, add NONE backend
      s4 provision: Default to win2k3 domain function level
      s4 provision/dns: Clean up backend handling
      s4 provision/dns: Clean up os level handling
      s4 provision: DNS backend should be set by caller
      s4 provision/dns: Move secretsdb_setup_dns to the AD DNS specific setup
      s4 provision/dns: Move DNS-related setup to sambadns module
      dns: Build the python bindings
      s4 dns: Support DNS_QTYPE_ALL queries
      s4 dns: Handle QCLASS_NONE queries
      s4 dns: the opcode is called OPCODE_UPDATE in the RFC, not OPCODE_REGISTER
      nbt: Fix offset check in ndr_pull_component
      dns: Fix offset check in ndr_pull_component
      s4 dns: Turn on internal DNS server during testing
      s4 dns: Add a first test case
      s4 dns: Reduce test output noise by upping log level for dns_name_packet logging
      s3 libaddns: Prevent a crash when dns_create_update fails
      s4 dns: Move dns_transaction_udp to other helper functions
      s4 dns: Check more of the returned values for the A query
      s4 dns: Test QTYPE_ALL query
      s4 dns: Test QCLASS_NONE query

Karolin Seeger (2):
      s3/packaging: Fix rpm build issues on RHEL.
      s3/packaging: Fix rpm build issues on RHEL4.

Martin Schwenke (1):
      Fix -Wunused-but-set-variable compiler warnings in tevent_signal.c

Matthias Dieter Wallnöfer (53):
      ldb:ldb_autotransaction_request - fix a typo in a comment
      ldb:ldb.c - "ldb_set_errstring" can be implemented by using "ldb_asprintf_errstring"
      ldb:ldb.c/"ldb_request" - make "ldb_request" always return an error string
      ldb:ldb.c/"ldb_wait" - change "ldb_wait" slightly in order to introduce error messages
      ldb:ldb.c/"ldb_wait" - make "ldb_wait" always return an error string
      s4:ldap_backend.c/"map_ldb_error" - handle errors similar to "PyErr_SetLdbError"
      ldb:pyldb.c - py_ldb_* modification calls - error string shouldn't be set here
      ldb:ldb_autotransaction_request - error string shouldn't be set here
      ldb:common/ldb_modules.c - fix a typo in comment
      s4:torture/ldap/basic.c - fix a typo
      s4:ldap.py - reactivate some assertions in "test_all"
      s4:ldap.py - fix up the UTF8 tests
      s4:password_hash LDB module - fix compiler warning due to unsatisfied "switch"
      s4:objectclass LDB module - update copyright
      s4:objectclass LDB module - "check_rodc_ntdsdsa_add"
      s4:objectclass LDB module - "objectclass_add" - small optimisation
      s4:objectclass LDB module - forbid to add unrelated objectclasses
      s4:objectclass LDB module - objectclass modify operations
      s4:objectclass LDB module - objectclass modify op. - remove superflous "talloc_strdup"
      s4:ldap.py - enhance and fix up the object class test
      s4:ldap.py - we test the creation of secrets already in the "systemOnly" testcase
      s4:objectclass_attrs LDB module - implement the dSHeuristics length checks correctly
      s4:ldap.py - fix up the dSHeuristics test to check for the right behaviour
      s4:repl_meta_data LDB module - "dsdb_search_module_dn" already checks if len(res) == 1
      s4:repl_meta_data LDB module - always return the original LDB result codes on failure
      s4:repl_meta_data LDB module - remove pointless debug messages
      s4:repl_meta_data LDB module - rename operation - do not overwrite error messages
      s4:repl_meta_data LDB module - don't intercept the partition LDB module referrals
      s4:lib/registry/regf.c - always generate debug messages on error cases
      s4:lib/registry/ldb.c - don't use search filters for base searches
      s4:lib/registry/ldb.c - quit the deletion of a not-existing default value with WERR_BADFILE
      s4:lib/registry - enhance registry tests in respect to default values
      s4:samba-tool - fix Gémes Géza patch regarding parameter handling
      s4:samba-tool - other fix for Gémes Géza patch regarding parameter handling
      s4:samba-tool user command - always initialise the boolean arguments properly
      s4:join.py - fix up "DsAddEntry" against Windows Server 2000
      libcli/cldap/cldap.c - remove outdated comment
      s4:join.py - fix typo
      s4:torture/rpc/samr.c - use "NULL" instead of "0" when initialising pointers
      s4:partition LDB module - fix handling regarding special DNs on searches
      socket_wrapper/py_socket_wrapper.c - include Python 2.4 compatiblity code
      idl:netlogon.idl - add the Active Directory Web Service bit (DS_SERVER_WEBSERV)
      s4:update_keytab LDB module - no need to filter for the DN
      s4:libcli/finddcs_cldap.c - let "finddcs_cldap" work either with the IP address or the domain name
      s4:libnet/py_net.c - initialise optional keyword arguments
      s4:libnet/py_net.c: "py_net_finddc" - add an "address" parameter
      s4:netcmd/common.py: add a "netcmd" function to do a cldap netlogon request
      s4:cldap_server/netlogon.c - DS_SERVER_CLOSEST handling
      s4:netlogon RPC server - DsRGetDcNameEx - set the DNS name flags correctly
      samba-tool: domain info - add basic exception handling
      s4:selftest/test_samba_tool.sh - add a basic unit test for the new "domain info" command
      s4:torture/ldap/cldap.c - remove the "test_cldap_netlogon_flag_ds_dns_forest" test
      s4:lib/tls - call "gnutls_transport_set_lowat" only on GNUTLS < 3.0

Matthieu Patou (29):
      Fix bug with Samba not recognising an 6to4 IPv6 interface.
      s4: check that the xattr are supported in the folder where we want to provision
      s4-interfaces: allow pure ipv6 to work
      provision: fix the doc
      s4-resolv: fix resolution of SRV records pointing to A and AAAA records
      libcli-cldap: avoid the case local == remote == NULL
      s4-cldap: fix cldap_socket_init to always specify the dest if local is NULL
      s4-vampire: Fix the output of fetched object for the schema-dn
      s4-domain-join: do not add DFSR entries when joining, this should be done in the code handling DFSR replication
      s4-join: Send ReplicaUpdateRefs at the end of the join
      s4-socket: do not segfault if the socket is NULL
      s4-resolver: make it work back with ipv4 only DNS records
      s4-python: add function to manipulate sites in python
      s4-selftest: add unit tests for sites's function in python
      samba-tool: add subcommand for sites manipulation
      s4-sites: Document, fix under optimal coding, use exceptions
      s4-resolver: fix bug with DNS servers returning AAAA records when asked for A records
      s4-socket: allow connect_multi_next_socket to try all the IP for a given host
      s4-librpc: do not limit to the first IP when trying to do a rpc connection
      s4: Simple test script to create lots of contacts to stress the LDB
      samba-tool: dbcheck avoid problems with deleted objects
      s4-drs: check if we have a domain level >= 2k8r2 as before the isRecycled do not exists and so is always False
      s4-dsdb: initialize correctly the value of originating_change_time for the Deleted Object Container
      samba-tool: allow dbcheck to correct the originating_change_time of the deleted object container
      s4-dsdb: rework the NC detection for the descriptor calculation
      s4-dsdb: Modify the repl_meta_data behavior to allow Metadata change on attribute interSiteTopologyGenerator even if the value didn't change
      smbtorture: avoid sigsev if the password is not correct
      s4-netlogon: return WERR_NO_SUCH_DOMAIN instead of WERR_DS_UNAVAILABLE if we are unable to translate the domain to a dn
      samba-tool: add a domain info command to get basic info

Michael Adam (135):
      s3:dbwrap: move the db_open_ctdb() prototype to a new header dbwrap_ctdb.h
      s3:dbwrap: move the db_open_tdb() prototype to a new header dbwrap_tdb.h
      s3:dbwrap: move the db_open_file() prototype to a new header dbwrap_file.h
      s3:dbwrap: move the db_open_rbt() prototype to a new header dbwrap_rbt.h
      s3:dbwrap: move dbwrap_fetch() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_delete() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_store() back to dbwrap.c, the core of the dbwrap subsystem
      s3:dbwrap: move dbwrap_traverse() to dbwrap.c, the core of the dbrwap subsystem
      s3:dbwrap: reorganize dbwrap.h some
      s3:dbwrap: change the dbwrap_traverse() wrapper to return the count in an additional parameter
      s3:dbwrap: add a wrapper dbwrap_traverse_read()
      s3:dbwrap: add a comment
      s3:dbwrap: add wrapper dbwrap_get_flags()
      s3:dbwrap: add wrappers for transactions start/cancel/commit
      s3:dbwrap: add wrapper function dbwrap_get_seqnum()
      s3:dbwrap: add get-functions for db_record key, value and private_data
      s3:dbwrap: add dbwrap_record_store(), a wrapper for record->store
      s3:dbwrap: add dbwrap_record_delete(), a wrapper for record->delete_rec
      s3:dbwrap: add dbwrap_fetch_locked(), a wrapper for db->fetch_locked
      s3:dbwrap: convert dbwrap_fetch(), dbwrap_fetch_bystring() and dbwrap_fetch_bystring_upper() to NTSTATUS
      s3:dbwrap: use dbwrap_fetch_bystring() in dbwrap_fetch_[u]int32()
      s3:dbwrap: convert dbwrap_util.c to use dbwrap wrapper functions
      s3:dbwrap_tool: convert to using wrapper functions only
      s3:dbwrap_torture: convert to using wrapper functions only
      s3:serverid: use dbwrap_traverse() in serverid_traverse()
      s3:serverid: use dbwrap_traverse_read() in serverid_traverse_read()
      s3:net: fix the exit code of net serverid list
      s3:net: fix the exit code of net serverid wipe
      s3:serverid: convert to using dbwrap wrapper functions only
      s3:net: convert net serverid to only use dbwrap wrapper functions
      s3:sessionid: use dbwrap_travers() in sessionid_traverse()
      s3:sessionid: use dbwrap_travers_read() in sessionid_travers_read()
      s3:sessionid: convert to using dbwrap wrapper functions only
      s3:sharesec: convert sharesec.c to use dbwrap wrapper functions
      s3:talloc_dict: change to only use dbwrap wrapper functions
      s3:registry: convert reg_backend_db to use dbwrap wrapper functions
      s3:g_lock: convert to use only dbwrap wrapper functions.
      s3:privileges: convert privileges.c to use dbwrap wrapper functions.
      s3:libnet: convert libnet_dssync_passdb to only use dbwrap wrapper functions.
      s3:idmap: convert idmap_tdb to use dbwrap wrapper functions.
      s3:net: convert net idmap to use only dbwrap wrapper functions
      s3:net: convert net idmap check to use dbwrap wrapper functions.
      s3:passdb: convert pdb_tdb to use dbwrap wrapper functions.
      s3:passdb: convert machine_sid to use dbwrap wrapper functions only
      s3:passdb: convert account_pol to use dbwrap wrapper functions only
      s3:secrets: convert to use dbwrap wrapper functions only
      s3:printing: convert printer_list to use dbwrap wrapper functions
      s3:vfs: change the xattr_tdb module to use dbwrap wrapper functions
      s3:vfs: convert nfs4_acls sidmap db code to use dbwrap_wrapper functions
      s3:vfs: convert the acl_tdb module to use dbwrap wrapper functions.
      s3:conn_tdb: convert connections tdb to only use dbwrap wrapper functions
      s3:smbd: convert connections.c to use only dbrwap wrapper functions
      s3:smbd: convert session.c to use dbwrap wrapper functions only
      s3:smbd: convert notify db to use dbwrap wrapper functions
      s3:rpc_server: convert srvsvc to only use dbwrap wrapper functions
      s3:groupdb: convert mapping_tdb.c to use dbwrap wrapper functions only
      s3:messages: convert to use only dbwrap wrapper functions
      s3:locking: convert brlock to only use dbwrap wrapper functions
      s3:locking: convert locking.c to use dbwrap wrapper functions only
      s3:locking: convert posix.c to use dbwrap wrapper functions only
      s3:torture: convert torture.c to only use dbwrap wrapper functions
      s3:dbwrap: move definitions of db_record and db_contect structs to dbwrap_private.h
      s3:idmap_autorid: untangle function from check and log status in idmap_autorid_db_init()
      s3:idmap_autorid: make a debug message more precise
      s3:passdb:account_pol: use dbwrap_fetch_uint32, not dbwrap_fetch_int32 for the DB version
      s3:idmap_tdb: fix hwm-handling to use uint32 consistently
      s3:idmap_tdb2: fix hwm-handling to use uint32 consistently
      s3:dbwrap: convert dbwrap_fetch_int32() to NTSTATUS return code
      s3:dbwrap: change dbwrap_fetch_uint32() to NTSTATUS return type (instead of bool)
      s3:dbwrap: change dbwrap_store_int32() to NTSTATUS return type
      s3:dbwrap: change dbwrap_store_uint32() to NTSTATUS return type
      s3:registry: improve regdb_create_subkey_internal() to always complete incomlete keys
      s3:dbwrap_ctdb: fix check for skipping the __db_sequence_number__ in traverse
      s3:dbwrap_ctdb: improve the check for skipping the __db_sequence_number__ record in traverse
      s3:smbcacls: make get_domain_sid() static
      selftest: mark samba4.drs.delete_object.python knownfail
      s3:dbwrap_ctdb: fix the build after changing signature of tdb_wrap_open()
      s4:selftest: flakey test samba4.drs.delete_object.python should go into skip
      libreplace: add a missing "eval" to the AC_VERIFY_C_PROTOTYPE macro
      s3:net registry: fix segfault when net registry is called without subcommands...
      selftest:Samba3: fix a message printed when starting winbindd
      selftest:Samba3: fix signature for check_or_start()
      lib/util: untangle assignent from check in strhex_to_str()
      lib/util: fix function header comment to strhex_to_str()
      lib/util: skip single hex digit at the end of the input sting - fix potential segfault
      talloc: fix a comment typo
      s4:torture:smb2: fix broken indentation/formatting in torture_smb2_connection()
      s4:torture:smb2: be leass leaky in wrap_simple_2smb2_test()
      s4:torture:smb2: fix a comment
      s4:torture:smb2: fix a nasty double free error.
      s4:torture:smb2: avoid leaking tree connects up to the main function from the durable_open test
      s4:torture:smb2: fix the durable_open test to succeed against w7 and w2k8r2
      s4:torture:smb2: adapt comment in durable-open.lease test according to current information.
      s4:torture: test also break semantics between batch-oplocks and leases
      source4/libcli: add bool durable_open to smb2_create.out.
      s4:libcli: in smb2_create_recv, map SMB2_CREATE_DURABLE_HANDLE_RESPONSE buffer smb2_create.out.durable_open
      s4:torture:smb2: check wheter open was durable in existing tests
      s4:torture:smb2: add a new durable_open_basic1 test: test open against all oplock types
      s4:torture:smb2: add durable_open_basic2 test: test durable open against all lease types
      s4:torture:smb2: rename the durable-open.basic1 test to durable-open.open1 for clarity
      s4:torture:smb2: rename the durable-open.basic2 test to durable-open.open2 for clarity
      s4:torture:smb2: expand durable-open.open1 test matrix by all share-modes
      s4:torture:smb2: expand durable-open.open2 test matrix by all share-modes
      s4:torture:smb2: add a new durable-open.upgrade2 test to test all upgrade combinations
      s3:selftest: improve logging in the registry upgrade test
      s4:torture:smb2: change the test file name in the durable-open.oplock test
      s4:torture:smb2: lease.update2: some more reasonable struct names and a comment
      s4:torture:smb2: fix illegal write/uninitialized data bug in the lease.multibreak test
      s4:torture:smb2: extract map_lease() to util.c as smb2_util_lease_state().
      s4:torture:smb2: use common smb2_util_lease_state() in the lease tests
      s4:torture:smb2: extract map_sharemode() to smb2_util_share_access() in util.c
      s4:torture:smb2: move oplock() from lease.c to smb2_util_oplock_level() in util.c for re-use
      s4:torture:smb2: lease: oplock_level is uint8_t, not uint32_t or int
      s4:torture:smb2: use smb2_util_oplock_level() in the durable-open test for convenience
      s4:torture:smb2: move the smb2_create_*() utility functions from lease.c to util.c for re-use
      s4:torture:smb2: add smb2_generic_create_share() that also takes the sharemode as parameter
      s4:torture:smb2: add smb2_lease_create_share() that takes a sharemode as parameter
      s4:torture:smb2: add smb2_oplock_create_share() that takes sharemode as parameter
      s4:torture:smb2: rewrite the durable-open.open1 test to use smb2_oplock_create_share()
      s4:torture:smb2: rewrite the durable-open.open2 test to use smb2_lease_create_share()
      s4:torture:smb2: rewrite the durable-open.file-position test to use smb2_oplock_create()
      s4:torture:smb2: rewrite the durable-open.oplock test to use smb2_oplock_create()
      s4:torture:smb2: rewrite the durable-open.lease test to use smb2_lease_create()
      s4:torture:smb2: rewrite the durable-open.lock test to use smb2_lease_create()
      s4:torture:smb2: rewrite durable-open.open test to use smb2_*_create functions
      s3:registry: prevent unnecessary transactions in regdb_init
      s3:torture:smb2: add SMB2-SESSION-RECONNECT test
      s3:torture: add a new test SMB2-TCON-DEPENDENCE
      socket_wrapper: simplify include path for replace.h
      socket_wrapper: use libreplace headers based on "#ifdef HAVE_LIBREPLACE"
      s3:locking:posix: adapt use of dbrwrap_fetch() to new NTSTATUS semantics
      s3:locking:posix: remove uses of SMB_ASSERT() from  get_windows_lock_ref_count()
      s3:dbwrap_ctdb: re-use map_nt_error_from_tdb() in local tdb_error_to_ntstatus()
      s3:dbwrap: turn the fetch dbwrap method to NTSTATUS return code.
      s3:dbwrap_tdb: pass NTSTATUS code further up from db_tdb_fetch_parse in db_tdb_fetch()

Richard Sharpe (1):
      Improve configure.in so it can be used outside the Samba source tree.

Rusty Russell (3):
      config.h: define HAVE_LIBREPLACE
      tdb2: use HAVE_LIBREPLACE instead of _SAMBA_BUILD_.
      tdb2: don't be fascist when TDB_VERSION1 is specified.

Sean Dague (4):
      test: add directory and base class for samba-tool tests
      test: Add samba-tool time tests
      test: add samba-tool user tests
      test: enable time and user samba-tool tests

Simo Sorce (5):
      ndr.pc: needs samba-util not samba-hostconfig
      pac: Fix wrong memory allocation check
      s3-group-mapping: Remove fstrings from GROUP_MAP.
      pdb-interface: Do not use unid_t here
      idl: Improve MS-PAC IDL

Stefan Gohmann (2):
      s4:dlz_bind9: add missing earch bases for windows 2000 domains
      s4:dlz_bind9: Copy dn before changing in b9_has_soa

Stefan Metzmacher (295):
      libcli/cldap: pass tevent_context to cldap_set_incoming_handler()
      libcli/cldap: pass tevent_context to cldap_netlogon_send()
      libcli/cldap: pass tevent_context to cldap_search_send()
      libcli/cldap: make use of explicit tevent_contexts
      libcli/cldap: don't pass tevent_context to cldap_socket_init()
      s3:wscript: add 'gssapi' dependecy to 'errors3'
      s3:vfs_acl_common: also parse xattr.NTACL version 1
      script/autobuild.py: split 'samba3' 'make -j 4 everything' into multiple steps
      lib/param: fix typo _SAMBA_BUILD => _SAMBA_BUILD_ causing segfaults
      s4:torture/smb2: we only support 64KB reads/writes for now
      s3:smb2_server: remember the max_{trans,read,write} sizes we negotiated (bug #8473)
      s3:smb2_server: reject writes larger then the negotiated max_write size (bug #8473)
      s3:smb2_server: get/set info are limited by max_trans size (bug #8473)
      s3:dbwrap_ctdb: return the number of records in db_ctdb_traverse() for persistent dbs
      s4:dlz_bind9: add no memory checks
      s3:auth_util: add the uid with WBC_ID_TYPE_BOTH also to the group array
      s4:auth/unix_token: match s3 behavior and add uid/gid to the groups array
      libcli/smb: add smb_[set]len_[nbt|tcp]() macros
      s3:include: use smb_[set]len_[nbt|tcp]() macros
      s4:lib/stream: make use of smb_len_tcp()
      s4:libcli/raw: make use of _smb_setlen_nbt()
      s4:libcli/smb2: make use of _smb_setlen_tcp()
      s4:smb_server/smb: make use of _smb_setlen_nbt()
      s4:smb_server/smb2: make use of _smb_setlen_tcp()
      s4:libcli/raw: remove unused smb_len(), _smb_setlen() and _smb2_setlen() macros
      s3:libsmb/smb_seal: make common_ntlm_[en|de]crypt_buffer static
      s3:include: move smb_seal.c prototypes to smb_crypt.h
      s3:libsmb/smb_seal: s/uint16/uint16_t
      s3:libsmb/smb_seal: move smb_set_enclen() to smb_seal.c and make it static there
      s3:libsmb/async_smb: in cli_state_notify_pending() we always disconnect
      libcli/smb: move some common defines to smb_constants.h
      libcli/smb: add smb_setlen_[nbt|tcp] macros
      s3:include: make smb_setlen() a macro
      s3:libsmb/smb_seal: make use of common [_]smb_[set]len_nbt() macros
      s3:libsmb/smb_seal: avoid ads_errstr() dependency and use gssapi_error_string()
      s3:libsmb/smb_seal: use plain malloc() in common_ntlm_encrypt_buffer()
      s3:libsmb/smb_seal: always use SAFE_FREE(buf) in common_free_enc_buffer()
      s3:smbd/seal: pass talloc_tos() auth_ntlmssp_update(), because we free a few lines later
      libcli/smb: move smb_seal.c to the toplevel
      libcli/cldap: make sure the local and remote address family matches
      s4:finddcs_cldap: finddcs_cldap_recv() returns NTSTATUS
      s4:finddcs_cldap: close the socket when it's not used anymore
      s4:finddcs_cldap: talloc free old memory before allocating a new netlogon struct
      auth/gensec: replace #if _SAMBA_BUILD_ == 4 by a feature test
      talloc/testsuite: remove #if _SAMBA_BUILD_==3
      dynconfig: replace #if (_SAMBA_BUILD_ >= 4) by feature tests
      lib/util: remove the "includes.h" dependeny from util_file.c
      lib/util: remove the "includes.h" dependeny from xfile.c
      talloc: simplifiy the logic to build talloc_testsuite in the standalone build
      s3:torture: avoid using read_smb()
      s3:libsmb: remove unused sync read_smb()
      s3:libsmb/read_smb: make use of smb_len_tcp()
      libcli/smb: move source3/libsmb/read_smb.* to the toplevel
      auth/gensec: fix missleading comment
      libcli/smb: move CAP_* defines to smb_constants.h
      libcli/smb: move more defines to smb_constants.h
      s4:libcli/raw: remove unuded CMD_REPLY define
      libcli/smb: merge LOCKING_ANDX_* and OPLOCK_* defines to smb_constants.h
      libcli/smb: remove unused includes from read_smb.h
      s4:libcli: rename smb_signing.h to smb_raw_signing.h in the install directory
      s3:libsmb/smb_signing: avoid usage of smb_ss_field
      s3:libsmb/smb_signing: make use of smb_len_nbt()
      s3:libsmb/smb_signing: make use of HDR_* defines
      libcli/smb: move smb_signing.[ch] to the toplevel
      s3:libsmb: use HDR_* defines in cli_pull_raw_error()
      s3:libsmb: make use of smb_[set]len_nbt() in async_smb.c
      s3:libsmb: use HDR_* defines in cli_state_dispatch_smb1()
      s3:libsmb: make use of map_nt_error_from_unix_common() in async_smb.c
      s3:lib/addrchange.h: include libreplace headers before others
      s3:libsmb: s/event_context/tevent_context/ in async_smb.[ch]
      s3:lib/errmap_unix: map EPIPE to NT_STATUS_CONNECTION_DISCONNECTED
      s3:smb2cli_base: make use of map_nt_error_from_unix_common()
      s3:smb2cli_base: make use of [_]smb_[set]len_tcp()
      s3:lib: make_unix_date() is the same as pull_dos_date()
      s3:lib: make_unix_date2() is the same as pull_dos_date2()
      s3:lib: make_unix_date3() is the same as pull_dos_date3()
      libcli/smb: merge NEGOTIATE_SECURITY_* flags to smb_constants.h
      libcli/smb: add smb_buffer_oob() helper
      s3:include: implement trans_oob() as wrapper to smb_buffer_oob()
      s3:libsmb: use smb_len_nbt() in clitrans.c
      s3:libsmb: make use of smb_buffer_oob() in clitrans.c
      s3:libsmb: use 'tevent_' instead of 'event_' in clitrans.c
      s3:libsmb: replace  smb_size - 4 with MIN_SMB_SIZE in clitrans.c
      s3:libsmb: avoid using smb_flg2 in cli_trans.c
      s3:libsmb: make use of map_nt_error_from_unix_common() in clitrans.c
      s3:rpc_client: remove references to auth_ntlmssp_state
      s4:librpc/dcerpc_smb: fix smb_write_callback()
      s4:librpc/dcerpc_smb2: fix smb2_write_callback()
      s4:lib/socket: don't pass -1 to close()
      s4:nbt_server/dgram: higher debug level for NBT_MAILSLOT_NETLOGON requests
      s3:smbd: also the parent smbd needs FLAG_MSG_PRINT_GENERAL (bug #8553)
      s3:smb2_server: echo the SMB2_HDR_CREDIT_CHARGE and SMB2_HDR_SIGNATURE fields
      s3:smb2_server: don't reset the tid and session id in the out hdr of compound requests
      s3:smb2_server: FLAG_CHAINED means we always use the last session_id and tid
      s4:smb_server/smb2: echo back more header fields
      s4:smb_server/smb2: always grant the requested credits
      s4:smb_server/smb2: correctly implement related compound requests
      s4:torture/smb2: fix compound.invalid2 against windows
      s3:torture: let SMB2-BASICS work against w2k8r2 and win8pre0
      s3:libsmb: restore the 3.6.x behavior signing config parameters
      s4:libcli/raw: only use smb signing if required
      s4:libcli/smb2: let SMB_SIGNING_AUTO behave like SMB_SIGNING_SUPPORTED
      s3:param: the behavior of "client/server signing = auto" is the same as "true"
      s4:smb_server/smb: make the SMB_SIGNING_AUTO behavior a bit easier to follow
      selftest/Samba4: use "server signing = on" for now
      s4:smb_server/smb2: add the same SMB_SIGNING_AUTO logic as for smb1
      libcli/smb: add SMB_SIGNING_DEFAULT
      s4:libcli/raw: SMB_SIGNING_DEFAULT matches SMB_SIGNING_SUPPORTED on the client for now
      s4:libcli/smb2: SMB_SIGNING_DEFAULT matches SMB_SIGNING_SUPPORTED on the client for now
      lib/param: change the default for "client signing" to "default"
      s4:smb_server: change the default for "server signing" to "default"
      lib/param: map "* signing = auto" to SMB_SIGNING_SUPPORTED
      s4:libcli/raw: remove unused SMB_SIGNING_AUTO handling
      s4:libcli/smb2: remove unused SMB_SIGNING_AUTO handling
      libcli/smb: SMB_SIGNING_AUTO is no longer used
      libcli/smb: add SMB_SIGNING_IF_REQUIRED as replacement for SMB_SIGNING_SUPPORTED
      lib/param: use SMB_SIGNING_IF_REQUIRED instead of SMB_SIGNING_SUPPORTED
      s4:libcli/raw: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      s4:libcli/smb2: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      s4:smb_server: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/
      libcli/smb: remove unused SMB_SIGNING_SUPPORTED
      libcli/smb: use the same values for SMB_SIGNING_* as the source3 code uses
      s3:param: make use of SMB_SIGNING_* constants
      s3:client: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:auth: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:nmbd: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:utils: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:web: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:winbindd: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:libnet: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:lib/netapi: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:lib: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:torture: s/Undefined/SMB_SIGNING_DEFAULT/ s/Required/SMB_SIGNING_REQUIRED/
      s3:libsmb: s/Undefined/SMB_SIGNING_DEFAULT/
      s3:libsmb: make use of SMB_SIGNING_* constants
      s3:lib: make use of SMB_SIGNING_* constants
      s3:libsmb: make use of SMB_SIGNING_* constants
      s3:smbd: make use of SMB_SIGNING_* constants
      s3:param: change default of "* signing" to "default"
      s3:libsmb: the workgroup in the non-extended-security negprot is not aligned (#8573)
      s3:libsmb: also remember the optional server name from the negprot response
      s3:smbd: also send the server name in the negprot response
      s3:smb2cli: ignore the NBT/Length header in smb2cli_inbuf_parse_compound()
      s3:libsmb: get cmd of the chained request before changing wct_ofs
      s3:libsmb: remember the seqnum on all chained requests
      s3:libsmb: make sure have_andx_command() returns false for non AndX commands
      s3:libsmb: return NT_STATUS_OK for if a request is not the last one in the chain
      s3:libsmb: key_len is 8bit only in the NT1 case
      s3:libsmb: correctly parse the LANMAN2.1 negprot response from OS/2 (bug #8584)
      s3:libsmb: fix cli_write_and_x() against OS/2 print shares (bug #5326)
      s3:libsmb: consistently use state->size in cli_write_andx_create() (bug #5326)
      s3:smb2_server: grant credits in async interim responses (bug #8357)
      s3:smbd: avoid string_set() in dir.c
      s3:smbd: fully construct the dptr before allocating a dnum in the bitmap
      s3:smbd: don't limit the number of open dptrs for smb2 (bug #8592)
      s4:finddcs_cldap: debug the correct server address instead of NULL
      libcli/cldap: fix a crash bug in cldap_socket_recv_dgram() (bug #8593)
      s3:smb2_flush: outbody only needs 4 bytes
      selftest: planpythontestsuite() should fill 'name' is it's None
      selftest/selftesthelpers.py: construct a fullname with env in plantestsuite_idlist()
      s4:selftest: samba4.urgent_replication.python needs to run as "dc:local"
      s4:libnet: initialize forest structure in py_net_replicate_init()
      s4:dsdb/samldb: use DSDB_FLAG_AS_SYSTEM in samldb_schema_info_update()
      s4:python/samba/schema: pass down the schema_dn to set_from_ldif()
      s4:dsdb/pydsdb: pass down schema_dn to _dsdb_set_schema_from_ldif()
      s4:dsdb/schema: pass and remember the schema_dn in dsdb_set_schema_from_ldif()
      s4:param/provision: pass schema_dn to provision_get_schema()
      s4:libnet_vampire: use dsdb_modify(..., DSDB_FLAG_AS_SYSTEM) to store prefixMap
      s4:libnet_vampire: setup base_dn on the self_made_schema
      s4:dsdb/schema_data: make sure we only allow objects one level below the schema base
      s4:dsdb/schema_data: make sure we reject schema changes if we're not the schema master
      s4:dsdb/schema_data: reject changes to schemaInfo, msDs-Schema-Extensions, msDS-IntId
      s4:dsdb/schema: add "dsdb:schema update allowed" option to enable schema updates
      selftest/Samba4: allow schema updates
      s4:dsdb/schema_data: reject schema update unless they're allowed
      s3:smb2_server: always send STATUS_PENDING responses, but delayed by 0.5 milliseconds
      s3:smb2_server: pass explicit defer_times to smbd_smb2_request_pending_queue()
      s3:smb2_create: defer STATUS_PENDING for 2 seconds as before
      s3:smb2_ioctl: STATUS_PENDING is defered by 1 millisecond for SMB2_IOCTL
      s3:smbd/aio: add cancel_smb2_aio()
      s3:smb2_write: make it possible to cancel aio writes
      s3:smb2_read: make it possible to cancel aio reads
      s3:smbd/aio: pass ECANCELED to the smb2 aio handlers
      s3:smbd/aio: handle_aio_completed() should do nothing if aio_ex->fsp is NULL
      HEIMDAL:lib/wind: fix wind_ucs4utf8() and wind_ucs2utf8()
      HEIMDAL:lib/winbd: fix wind_ucs2write with WIND_RW_LE
      HEIMDAL:lib/wind: export wind_ucs2write()
      HEIMDAL:lib/krb5: add utf8 support to build_logon_name() for the PAC
      lib/util/debug: with log level = 10 we should be more verbose
      s3:libsmb: always init cli->{server_os,server_domain,server_type}
      Revert "Fix bug #8453 - smbclient segfaults when dialect option -m is used for legacy dialects"
      s3:smbd: calculate the negprot signing flags from the signing_state
      s3:winbindd_cm: remove unused ads_status
      s3:libsmb: only align unicode pipe_name (bug #8586)
      s3:libsmb: fix compiler warning in cli_pull_trans()
      s3:libsmb: verify num_setup for SMBnttrans in cli_pull_trans()
      lib/param: add "SMB2_22" to enum_protocol
      s3:smb2_negprot: add support for SMB2_22
      s3:libsmb: close fd on error in cli_connect_nb()
      s3:winbindd_cm: close sockfd on error in cm_prepare_connection()
      pidl:Samba4/NDR/Parser: don't generate code for [ignore] pointers
      smbXcli: cp source3/libsmb/async_smb.c libcli/smb/smbXcli_base.c
      smbXcli: rework smbXcli_base.c to use smbXcli_conn/smbXcli_req
      libcli/smb: copy smb2cli_req_* code to smbXcli_base.c
      smbXcli: rework smb2cli_req to smbXcli_conn/smbXcli_req
      s3:smb2cli: replace smb2cli_base.c code with the more generic smbXcli_base.c code
      smbXcli: set message id to UINT64_MAX for BREAK in smb2cli_req_create()
      smbXcli: split out a smb1cli_req_flags() function
      smbXcli: add state->smb1.recv_{cmd,status,iov}
      smbXcli: pass hdr to smb1cli_pull_raw_error()
      smbXcli: add smb1cli_inbuf_parse_chain()
      smbXcli: use smb1cli_inbuf_parse_chain() and remember more details per chain response
      smbXcli: rework smb1cli_req_recv() to expose an iov with 3 elements
      smbXcli: reorder smb1cli_conn_dispatch_incoming() to avoid too much nesting
      smbXcli: remove unused smb1cli_have_andx_command()
      smbXcli: simplify smb1cli_req_chain_submit()
      smbXcli: also notify chained requests about broken connections
      smbXcli: add helper functions to access the negotiated features
      smbXcli: add smbXcli_negprot_*
      smbXcli: pass client_guid to smbXcli_conn_create()
      smbXcli: add support for 2.??? negprot and PROTOCOL_SMB2_10
      smbXcli: add support for SMB2 multi-credit requests
      smbXcli: add support for PROTOCOL_SMB2_22 in smbXcli_negprot()
      s3:smb2cli: implement smb2cli_negprot() on top of smbXcli_negprot()
      smbXcli: add smbXcli_session infrastructure
      smbXcli: add support for smb2 signing
      s3:smb2cli: make use of smbXcli_session and setup the session key for SMB2 signing
      s3:smb2cli: make smb2cli_session_setup_send/recv non-static
      s3:smb2cli: add forward declaration for struct cli_state
      smbXcli: add smb2cli_session_create_channel()
      smbXcli: fix smb signing for SMBntcancel
      smbXcli: add support for tevent_req_cancel() on smbXcli_req
      smbXcli: add smb2cli_req_set_notify_async()
      s3:libsmb: implement cli_state based functions on top of smbXcli_conn/smbXcli_req
      s3:smb2cli: pass struct smbXcli_conn directly to smb2cli_req_create/_send()
      s3:SMB2-BASIC: use smbXcli_negprot() directly
      s3:smb2cli: remove unused smb2cli_negprot()
      s3:torture: add SMB2-NEGPROT test
      s3:selftest: run SMB2-NEGPROT
      smbXcli: cp source3/libsmb/clitrans.c libcli/smb/smb1cli_trans.c
      smbXcli: rework smb1cli_trans.c to use smbXcli_conn/smbXcli_req
      s3:libsmb: implement cli_trans* on top of smb1cli_trans*
      s3:libsmb: add SMB2 support to cli_session_setup()
      s3:torture: replace smb2cli_sesssetup_ntlmssp() with the more generic cli_session_setup()
      s3:smb2cli: remove unused smb2cli_sesssetup_ntlmssp*
      s3:libsmb: add cli_tree_connect() for a generic tree connect
      s3:winbindd_cm: make use of cli_tree_connect()
      s3:utils: make use of cli_tree_connect()
      s3:torture: make use of cli_tree_connect()
      s3:nmbd: make use of cli_tree_connect()
      s3:libsmb: make use of cli_tree_connect()
      s3:client: make use of cli_tree_connect()
      s3:torture: use cli_tree_connect() instead of smb2cli_tcon()
      s4:torture/smb2: use tctx->ev as event context for polling
      s3:smbXcli: keep two fd per connection in order to work with the epoll tevent backend
      s4:libcli/smb2: implement on top of smbXcli_conn/req
      s4:libcli/smb2: fix compiler warning in smb2_push_o16s16_string()
      s4:libcli/smb2: use talloc_zero() in smb2_request_init()
      s3:torture: add SMB2-MULTI-CHANNEL test
      s3:torture: add SMB2-SESSION-REAUTH
      s3:smb2cli: free session in smb2cli_logoff*
      s3:smb2cli: zero tid in smb2cli_tdis*
      s3:torture: test smb2cli_logoff and smb2cli_tdis
      s4:libnet: use talloc_zero(struct libnet_JoinDomain) in libnet_Join_member()
      s4:torture/rpc: use talloc_zero() in torture_join_domain()
      s4:libnet/py_net: ZERO_STRUCT() struct libnet_Join_member in py_net_join_member()
      s4:libnet: make it possible to join with a given machine password
      s4:py_net: add optional 'machinepass' parameter to py_net_join_member()
      s4:python/samba/join.py: add optional 'machinepass' parameter to class dc_join
      s4:python/samba/join.py: add optional 'machinepass' parameter to join_*()
      s4:python: add --machinepass option to 'samba-tool domain join'
      selftest/Samba4: pass '--machinepass' to 'samba-tool domain join'
      libcli/smb: remove unused smb_signing_set_bsrspyl() prototype
      smbXcli: use talloc_stackframe() instead of talloc_tos() in smb1cli_conn_signv()
      smbXcli: call tevent_queue_stop() for the outgoing queue on disconnect
      smbXcli: s/smb2cli_writev_done/smb2cli_req_writev_done
      smbXcli: allow up to 10 iovec elements for the bytes in smb1cli_req_create()
      smbXcli: rebuild smb1.recv_iov array if we expect more than one response
      smb1cli_trans: return the status from the server if possible
      smb1cli_trans: add support for tevent_req_cancel()
      s4:libcli/smb2: make sure only one idle event runs at a time
      s4:gentest: get the tid from the smbcli_tree struct
      smbXcli: add smb1cli_conn_server_{readbraw,writebraw,lockread,writeunlock}()
      smbXcli: add support for SMBreadBraw
      s4:torture: use tctx->ev as event context for polling
      s4:libcli/raw: add transport->ev as copy of transport->socket->event.ctx
      s4:libcli/raw: copy smbcli_transport_connect_* to clisocket.c
      s4:lib/socket: add socket_connect_multi_ex_*
      s4:libcli: convert smbcli_transport_connect_* to tevent_req
      s4:libcli: move smbcli_transport_establish() logic into smbcli_socket_connect()
      s4:libcli: use smbcli_sock_connect() in smbcli_socket_connect()
      s4:libcli/raw: remove unused functions
      s4:libcli: do the nbss session request within smbcli_sock_connect_*()
      s4:libcli/raw: implement on top of smbXcli_conn/req
      s4:gensec/spnego: only try the mechs that match the client given ones

Sumit Bose (2):
      build: added autoconf --disable-silent-rules option
      s3-lsa: Let passdb backend handle the DOMAIN$ user

Theresa Halloran (4):
      s4: samba-tool subcommand rename - change samba-tool user add to samba-tool user create
      s4: samba-tool user --help documenation improvements
      s4: samba-tool group --help documentation improvements
      s4: samba-tool time --help documentation improvements

Volker Lendecke (36):
      Add cldap_multi_netlogon_send/recv
      s3: Before adding KDC's to the krb5.conf, cldap ping them
      s3: Avoid a winbind 100% cpu loop
      s3: Fix some type-punned warnings
      s3: Fix some nonempty blank lines
      s3: Use talloc_tos() in parse_share_modes()
      s3-ctdb: Don't hand out 0 as reqid
      s3-ctdb: Allow ctdb_read_req to read any reqid
      s3-ctdb: Add ctdb_processes_exist
      s3-ctdb: Make ctdbd_process_exists use ctdbd_processes_exist
      s3: Add processes_exist
      s3: Add serverids_exist
      s3: Use serverids_exist in parse_share_modes
      s3-ctdb: Add debug to ctdb_processes_exist
      s3-ctdb: Fix ctdb_read_req
      s3: Remove some leftovers of old ctdb tdb2 code
      s3: Fix a comment
      s3: Fix some nonempty blank lines
      s3: Remove two unused variables
      s3: Avoid a race with the async echo handler
      s3: server_id.pid has turned 64 (bits, that is)
      s3: Fix bug 8371
      s3: Fix wb_next_pwent_fill_done
      s3: Replace delete_token_list by an array
      s3: Move server_info_struct to nmbd
      s3: Fix a valgrind error
      s3:libsmb: Fix a typo
      s3: Add some const
      s3: user_domain is not used in wb_getpwsid
      s3: Fix a crash in group_mapping.ldb->tdb conversion
      Fix Coverity ID 2639: UNUSED_VALUE
      Fix Coverity ID 2638: OVERRUN_STATIC
      s3: Use tevent_req_simple_recv_ntstatus
      s3: Remove some false/superfluous translations
      s3-ctdb: Make use of CTDB_CONTROL_CHECK_SRVIDS
      s3: Attempt to fix the vfs_commit module

Volodymyr Khomenko (1):
      Fix bug #8515 - Empty CIFS share can be blocked for other clients by deleting it via empty path (DELETE_PENDING until the last client)

Wilco Baan Hofman (1):
      Fix uninitialized memory problem in group_sids_to_info3 (fixes bug #8455).

-----------------------------------------------------------------------


-- 
Samba Shared Repository


More information about the samba-cvs mailing list