[SCM] Samba Shared Repository - annotated tag ldb-1.1.14 created

Stefan Metzmacher metze at samba.org
Fri Nov 30 01:45:48 MST 2012

The annotated tag, ldb-1.1.14 has been created
        at  ae3f7139cf13ee222beeb7468977e5c8d2484f28 (tag)
   tagging  6f47497610352f72128bdbcd3b45313ea9a265ab (commit)
  replaces  ldb-1.1.13
 tagged by  Stefan Metzmacher
        on  Fri Nov 30 09:50:10 2012 +0100

- Log -----------------------------------------------------------------
ldb: tag release ldb-1.1.14
Version: GnuPG v1.4.11 (GNU/Linux)


Alexander Bokovoy (1):
      Fix release script to build full set of documentation

Alexander Wuerstlein (3):
      Set RFC2307 attributes in samba-tool create
      Tests for 'samba-tool user create' with RFC2307 attributes
      Warn when setting UID/GID without idmap_ldb:use rfc2307 = Yes

Amitay Isaacs (3):
      s4-dns: dlz_bind9: Ignore zones that are not used by BIND9 DLZ plugin
      s4-rpc: dnsserver: Ignore DNS zones that are not used by RPC dnsserver
      s4-dns: Fix format string vulnerability in an error message (bug #9354)

Andreas Schneider (24):
      s3-printing: Increase debug level for info that the db is empty.
      s3-smbd: Don't segfault if user specified ports out for range.
      s3-spoolss: Fix builtin forms order to match Windows again.
      s3fs-smbd: Move housekeeping to the background process.
      waf: Build pam_smbpass module only if enabled.
      s3fs-smbd: Make sure the registry is set up before we init printing.
      s3fs-printing: Fix RAW printing for normal users.
      packaging: Add config for systemd-tmpfiles.
      packaging: Add support for reloading systemd services.
      s3fs-printing: Simplify the comment and location handling.
      BUG #9295: Build standard auth modules as internal modules.
      wafsamba: If we define a realname and a soname create a symlink.
      waf: Create a libnss_winbind.so symlink.
      waf: Create a libnss_wins.so symlink.
      ntlm_auth: Increase debug level if we use config domain name.
      packaging: Move smbprint to a comman location.
      BUG 9326: Fix net ads join message for the dns domain.
      packaging: Add NetworkManager dispatcher script for winbind.
      s3fs-net: Use talloc for memory allocation.
      s3fs-utils: Free the popt context in smbcacls and smbquotas.
      s3fs-popt: Add function to burn the commandline password.
      s3fs-client: Burn commandline password of client utils.
      torture: Fix smb2.create.blob test.
      s3:winbind: BUG 9386: Failover if netlogon pipe is not available.

Andrew Bartlett (128):
      libwbclient: bump ABI to 0.11 as wbcAuthenticateUserEx now provides PAC parsing
      auth/kerberos: add HAVE_KRB5 guard to fix non-krb5 build after winbindd pac changes
      build: Try not build with LDAP if we do not have ldap.h
      build: Fix enabled handling for HAVE_LDAP, we need to use bld.CONFIG_SET
      ntdb: Try to fix the build on Solaris which does not have err
      lib/replace: Try to fix build on HP-UX for os2_delete test
      build: Remove unused IRIX and IRIX6 defines
      lib/util: Remove unbuilt file util_getent.c and BROKEN_GETGRNAM
      build: Rework waf STAT_ST_BLOCKSIZE to match autoconf, with 512 as the default
      build: Make waf configure match autoconf for HPUX ACLs
      lib/replace: Remove unused nap and therefore the SCO define
      build: Remove unused define UNIXWARE
      lib/replace: Improve mkstemp test in autoconf and waf
      lib/replace: Look for special flags needed for c99
      build: Add missing dep on tdb_compat
      torture: tidy up rpc.lsa OpenPolicy2 test to more clearly use torture_fail()
      torture: use torture_assert rather than return false in rpc.lsa
      torture: More torture_assert() calls in rpc.lsa
      build: Fix detection of quotas on macos
      client: Fix talloc_stackframe() free order assertion in developer mode
      docs: Update TOSHARG-Install
      docs: Remove references to default paramters in TOSHARG-PDC
      docs: Explain the no-domain-logons restriction applies to all HOME editions
      docs: Add mention of AD DC support in TOSHARG-PDC
      docs: Remove Win9X/WinMe mentions from TOSHARG-PDC
      docs: Fix typo in TOSHARG-Passdb
      docs: Remove mention of auth methods in TOSHARG-Passdb
      docs: Change TOSHARG-VFS to avoid suggesting VFS modules are Linux/IRIX only
      lib/util/charset: Try to find iconv on HP-UX
      lib/util/charset: We do not use fucntions from wchar.h any more
      selftest: Remove invalid security=share and rename secshare to simpleserver
      samba_dnsupdate: Move to using tmpfile/rename to keep the dns_hosts_file consistent
      samba_dnsupdate: Safely update/create names for Samba3 targets as well
      build: Add waf configure support for non-linux quotas
      build: Remove unused samba_cv_sysquotas_file variable from autoconf configure
      build: Set HAVE_SYS_QUOTAS and WITH_QUOTAS if we have any supported sysquota backend
      build: Remove unused --with-sys-quotas option
      nsswitch: Add waf tests for solaris special cases
      lib/replace: Add test for what flag we need for -Werror behaviour
      build: Fix quota tests, including move of sysquotas.c to the top level
      build: Remove duplicate check for struct getquota_rslt member getquota_rslt_u
      selftest: use an array when starting testenv with system()
      selftest: Always build a linux-style nss_winbind for nss_wrapper
      nsswitch: Build nss_winbind on all supported platforms
      wintest: bump version to 4.1
      wintest: Add config file for a second host
      wintest: Give netdom join more time to complete
      wintest: Give dcpromo more time
      samba-tool: skip chown in sysvolreset when it would fail on a GID
      posixacls: Add IDL changes for vfs_acl_xattr using hash of the sys acl
      build: Add vfs_media_harmony to the waf build
      smbd: Add mem_ctx to sys_acl_init() and all callers
      smbd: Add mem_ctx to {f,}get_nt_acl VFS call
      vfs: Remove type parameter from sys_acl_blob_get_{fd,file}
      vfs: Implement a sys_acl_blob_get_{fd,file} for POSIX ACL backends
      vfs: Use a blocking function in vfs_afsacl for system ACL blobs
      vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl
      vfs: Use posix_sys_acl_blob_get_file in vfs_aixacl2 for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_default for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_fake_acls for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_gpfs for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_hpux for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_irix for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_posixacl for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_solarisacl for posix ACLs
      vfs: Use posix_sys_acl_blob_get_file in vfs_tru64acl for posix ACLs
      vfs: Use a blocking function in vfs_zfsacl for system ACL blobs
      examples: Re-indent and reformat skel VFS modules
      vfs: Improve formatting of vfs_default
      vfs: Improve formatting of vfs_fake_acls
      vfs: Fix alternative posix and no-op sys acl implementations to take a mem_ctx
      vfs: Remove irixacl module (all the fucntions in it are unimplemented)
      build: Remove --disable-shared
      rpc_server:srvsvc Remove psd variable that was no longer set by SMB_VFS_FGET_NT_ACL
      smbd: Always free the talloc_stackframe() before leaving smbd_do_query_security_desc
      dns_server: Try and use the dns-SERVER account if we were configured with it
      provision: No longer use the wheel group in new AD Domains
      build: Assert that auth_domain, auth_builtin, auth_sam, auth_winbind are builtin
      vfs: Fix compilation of ACL support on solaris
      lib/replace: Fix detection of rpcsrv/yp_prot.h on FreeBSD
      lib/replace: Fix detection of prctl
      lib/replace: Fix configure on FreeBSD: define_ret is not correct here
      build: Add #define FREEBSD on FreeBSD
      dsdb-cracknames: Always use talloc_zero()
      dsdb-cracknames: Return DRSUAPI_DS_NAME_STATUS_NO_MAPPING when there is no SID
      pysmbd: Fix pysmbd octal mode handling
      selftest: Add many more tests for our posix ACL handling
      selftest: Cover one more NT ACL invalidation case and improve comments
      selftest: Cover the important non-Samba invalidation of the NT ACL
      selftest: Always unlink the tempf in posixacl test
      dbwrap: use talloc_stackframe() in db_tdb_log_key()
      python-ntacls: Cope with ACL revision 4
      pysmbd: Add hook for unlink() so python scripts can remove xattr.tdb entries
      pysmbd: Remember to close files after setting the NT ACL
      pysmbd: Set umask to 0 during smbd operations
      vfstest: set umask(0) in vfstest
      provision: Fix comments in checksysvolacl
      sefltest: use TestCaseInTempDir and setUp/tearDown for posixacl.py temp file
      lib/replace: Return size of xattr if size argument is 0
      build: Remove support for IDL-generated files in git tree
      pidl: Remove depends_on=PIDL_MISC as it sets -I/ into CFLAGS
      imessaging: Add irpc_all_servers() to list all available servers
      pymessaging: Use the server_id IDL structure rather than a tuple
      pymessaging: Add irpc_servers_byname() and irpc_all_servers()
      samba-tool: Add samba-tool processes subcommand
      ldb: Change ltdb_unpack_data to take an ldb_context
      ldb: Remove no-longer-existing ltdb_unpack_data_free from ldb_tdb.h
      ldb: Add ldbdump, based on tdbdump
      file_server: put set create mask and directory mask in fileserver.conf
      s3-param: Move the options needed for running smbd in the AD DC to loadparm
      vfs_acl_common: In add_directory_inheritable_components allocate on psd as parent
      selftest: Add skip for DIR1 test which loops on 64 bit ext4
      libads: Always free the talloc_stackframe() on error path
      buildtools: Remove extra space from global: line
      selftest: check that samba-tool gpo works for basic operations
      wintest: Try harder to recover from apparent failure to dcpromo
      provision: Also walk directories checking ACLs
      provision: Make dsacl2fsacl() take a security.dom_sid, not str
      samba-tool: Rework ldap attribute fetch in classicupgrade for missing attributes
      selftest: Make samba.tests.ntacl also use TestCaseInTempDir
      pysmbd: Add SMB_ACL_EXECUTE to the mask set by make_simple_acl()
      selftest: Add tests for expected behaviour on directories as well as files
      selftest: Avoid test cross-contamination in samba.tests.posixacl
      ntp_signd: move socket directory to var/lib not var/run for permissions change
      ntp_signd: Only allow group access to the ntp signd directory.
      selftest: Avoid returning errors (rather than failures) in gpo test
      Revert "selftest/skip: add samba.tests.samba_tool.gpo until it's stable"
      selftest: Add --tmpdir to 'samba-tool gpo create' test

Andrew Tridgell (12):
      auth: added cli_credentials_failed_kerberos_login()
      libcli: use cli_credentials_failed_kerberos_login() to cope with server changes
      test_chgdpass: added test for kerberos retry
      s4-librpc: use cli_credentials_failed_kerberos_login to cope with stale tickets
      test_chgdpass: use drs bind to test password change on RPC
      ldb: move ldb_pack.c into common
      ldb: fixed callers for ldb_pack_data() and ldb_unpack_data()
      s4-librpc: try a 2nd logon for more error cases
      samba-tool: "drs options" does not need a samdb connection
      s4-librpc: set error code to LOGON_FAILURE on RPC fault with access denied
      s4-ldapclient: cope with logon failure retry in LDAP
      test-chgdcpass: test the ldap case for server password change

Arvid Requate (1):
      s3:smbd: Fix typo in got_duplicate_group check

Björn Baumbach (14):
      s3: make recursive_rmdir function non-static
      s3: vfs_streams_depot: add delete_lost option
      s4: samba_backup: Fix typos.
      s3-docs: Fix opening and ending tag mismatch in Samba3-HOWTO (Bug #9235)
      s3-docs: add delete_lost option to vfs_streams_depot.8
      docs: fix opening and ending tag mismatch: para
      docs: fix opening and ending tag mismatch: para
      docs-xml: fix use of <smbconfoption> tag (fix bug #9345)
      build(autoconf): fix check for ctdb_private.h
      build(autoconf): check if we have ctdb_protocol.h in the cluster checks
      build(waf): check if we have ctdb_protocol.h in the cluster checks
      s3:ctdb library: fix the build against older ctdb versions
      s3-torture:test_ctdbconn: fix the build against older ctdb versions
      build(waf): Fail "configure --with-cluster-support" if ctdb support is not available.

Björn Jacke (9):
      quota: add supprt for gfs2
      replace: fix 520c9b0b0ae33
      wfabuild: fix the -errwarn compile flag test
      wafbuild: merge the missing IBM compiler Werror flag "-qhalt=w" to waf
      wafbuild: reorder the Werror checks so that the ambigous w2 option is being checked last
      ccan/wafbuild: use WERROR_CFLAGS instead of -Werror
      wafbuild: use WERROR_FLAGS in wscript_configure_system_mitkrb5
      wafbuild: use -Wstack-protector if available
      util: remove accidently committed hunk

Christian Ambach (21):
      s3:utils/net fix a compiler warning
      s3:rpcclient fix a compiler warning
      s3:pdb_ldap remove unused function
      s3:winbindd fix a compiler warning
      s3:vfs_fake_acls fix a compiler warning
      s3-pylibsmb: move py_tevent_req_wait_exc up in the file
      s3:printing only do printing_subsystem_update when printing is enabled
      s3:winbindd fix a compiler warning
      s3:passdb formatting changes
      s3:nfs4acls pass down fsp instead of just the filename
      s3:nfs4acls filter away inheritance flags on files
      Revert "smb.conf(5): Remove 'idmap config' documentation - the parameter has"
      s3:vfs_gpfs skip local flock when gpfs sharemodes are disabled
      s3:vfs_gpfs remove a trailing space
      s3:vfs_gpfs fix the build
      s3:vfs_gpfs re-indent run-away lines
      s3:smb2_getinfo ensure proper error for not yet present quota support
      s3:docs document shadow:snapdirseverywhere option of vfs_shadow_copy2
      s3:utils fix a whitespace error
      build(waf): support AIX 6.1
      build: add DMAPI configure option and checks

Christof Schmitt (3):
      winbind: Extend wbcAuthenticateUserEx to provide PAC
      auth/kerberos: Adjust log level for failed PAC signature verification
      s4-torture: Complete test for winbindd PAC parsing

Daniele Dario (1):
      Correct command help message

David Disseldorp (9):
      vfs: fix lock logging in vfs_full_audit
      vfs: fix acl_blob_get* in vfs_full_audit
      vfs: add missing pwrite ops to full_audit
      vfs: check full_audit enum->str mapping on startup
      s3-rpc_server: fix build warning
      pam_winbind: fix segfault in pam_sm_authenticate()
      Revert "s3-winbindd: make sure we obey the -n switch also for samlogon cache access."
      doc: describe samlogon cache caveat for winbindd -n
      doc: list arguments for rpcclient FSRVP commands

Gregor Beck (26):
      s3:dbwrap: let dbwrap_fetch_uint32 distinguish between "not found" and "wrong format"
      s3:dbwrap: remove unused args from db_open_file()
      libtorture: factor out simple ui backend
      s3:dbwrap_ctdb: set errno = ENOSYS if clustering is not supported
      s3:auth: use const in smb_pam_xxx_session()
      s3:rpc_server/srvsvc: remove function net_enum_pipes()
      s3:lib: remove unused function connections_traverse()
      s3:smbcontrol: don't do stack_trace by connection but by server_id.
      s3:count_current_connections: do not clear orphaned entries from connections.tdb
      s3:net_status_shares: use connections_forall_read for a read only traversal
      s3:smbd: pass smbXsrv_session instead of user_struct to session_claim() and session_yield()
      s3:smbd: remove smbd_server_connection argument from session_claim()
      s3:smbd: initialize session->global before calling session_claim
      s3:smbd: use session_global_id as session number for pam and utmp
      s3:smbXsrv_session: add smbXsrv_session_global_traverse()
      s3:smbXsrv_tcon: add smbXsrv_tcon_global_traverse()
      s3:build: move sessionid_tdb.o and conn_tdb.o to SMBD_OBJ_BASE
      s3:smbd:setup_new_vc_session: traverse sessions instead of connections to shutdown other smbds
      s3:smbd/connection: use smbXsrv_tcon_traverse to count connections
      s3:lib: implement sessionid_traverse_read with smb2srv_session_traverse_read
      s3:smbd: don't use (fill) sessionid.tdb in session_claim/yield any more.
      s3:net_serverid: remove sessionid_traverse from "net serverid wipedbs"
      s3:lib: remove unused sessionid_*() functions
      s3:net_serverid: remove connections_forall from "net serverid wipedbs"
      s3:lib: remove function connections_forall()
      s3:lib/conn_tdb: implement connections_forall_read() based on smbXsrv_*_global_traverse()

Günther Deschner (10):
      pam_winbind: match more return codes when wbcGetPwnam has failed.
      s3-lsa: Flesh out the returned info in _lsa_EnumTrustedDomainsEx().
      s3-winbindd: Adjust error code loop logic in rpc_trusted_domains().
      s3-krb5: use and request AES keys in kerberos operations.
      s3-kerberos: add aes enctypes to generated krb5.conf.
      s3-net: pass down struct net_context to the dns update calls.
      s3-net: move out some prototypes to net_dns.h.
      s3-net: pass down a flags field to DoDNSUpdate().
      s3-net: give more control how to update/register DNS entries.
      s3-net: Fix DEBUG() location.

Ira Cooper (3):
      waf: Make samba "ok" with directories for install being symlinks
      s3: Compound requests should continue processing.
      s3: Fix libnss_winbind.so's build on Illumos/Solaris

Jelmer Vernooij (114):
      samba-tool domain-provision: Fix docstring.
      samba-tool domain-provision: Avoid python2.5-isms.
      replace: Support setproctitle().
      Remove compatibility code for setproctitle() now moved to libreplace.
      samba-tool domain provision: DNS forwarder is not a boolean.
      replace: Avoid returning value in void setproctitle() replacement.
      s4-python: Override SIGINT handler in scripts only.
      samba-tool: Hide 'samba-tool domain samba3upgrade'.
      Remove obsolete land-remote.py and land.py scripts.
      undocumented: Drop extension from helper scripts.
      smb.conf.5: Document 'cldap port'.
      Remove unused neatquotes script.
      smb.conf(5): Remove 'idmap config' documentation - the parameter has
      smb.conf(5): Remove documentation for removed 'lock spin count'
      netlogon: Per MS-NRPC, don't send unknown workstation flags back to the
      find_missing_manpages: Ignore make variables.
      find_missing_manpages: convert to python
      find_missing_doc: Convert to python.
      smb.conf(5): Distinguish parametric options.
      smb.conf(5): 'write ok' is a reverse synonym for 'read only'.
      smb.conf(5): Add basic documentation for 'krb5 port'.
      smb.conf(5): Add basic documentation for 'nbt port'.
      smb.conf(5): Add basic documentation for 'web port'.
      smb.conf(5): Add basic documentation for 'unicode'.
      smb.conf(5): Add basic documentation for 'dgram port'.
      smb.conf(5): Add basic documentation for 'kpasswd port'.
      smb.conf(5): Add basic documentation for 'rpc bigendian'.
      smb.conf(5): Consistent spelling of parameter names.
      smb.conf(5): Extend 'server min protocol' description.
      smb.conf(5): Add basic documentation for 'server min protocol'.
      smb.conf(5): Document 'share backend' parameter.
      smb.conf(5): Add basic documentation for 'client min protocol'.
      smb.conf(5): Add documentation for 'client max protocol'.
      smb.conf(5): List 'protocol' as alias for 'server max protocol'.
      smb.conf(5): Add basic documentation for 'dcerpc endpoint servers'.
      samba.tests.source: Check for trailing whitespace in Python files.
      s4-python: Various formatting fixes.
      sanba.upgradehelpers: Use standard functionality for getting temp dir.
      samba4-tests: Move 'samba.tests.source' up.
      provision: Use logger rather than print.
      wafsamba: Ignore some more symbols when checking for dupes.
      provision: Always create DNS user.
      samba.provision.sambadns: Use == to compare strings, not 'is'.
      selftests.tests: Remove reference to Samba 4.
      selftest: Move some tests to common test script.
      samba.join: Fix multiple spaces.
      selftest: Move more tests to common list script.
      smb.conf(5): Extend 'server min protocol' description.
      smb.conf(5): Add basic documentation for 'winbindd socket directory'.
      smb.conf(5): Add basic documentation for 'winbindd privileged socket directory'.
      smb.conf(5): Add : to idmap config description to mark it as parametric.
      smb.conf(5): Add basic documentation for 'ntvfs handler'.
      smb.conf(5): Add basic documentation for 'dns forwarder'.
      smb.conf(5): Add basic documentation 'winbind sealed pipes'.
      samba-tool user: Fix typos, improve messages.
      smb.conf(5): Add basic documentation for 'samba kcc command'.
      smb.conf(5): Add basic documentation for 'server services'.
      smb.conf(5): Add basic documentation for 'dns update command'.
      smb.conf(5): Add basic documentation for 'rndc command'.
      smb.conf(5): Add basic documentation for 'allow dns updates'.
      smb.conf(5): Add basic documentation for 'spn update command'.
      smb.conf(5): Add basic documentation for 'ntp signd socket directory'.
      smb.conf(5): Add basic documentation for 'log nt token command'.
      smb.conf(5): Add basic documentation for 'tls cafile'.
      smb.conf(5): Add basic documentation for 'tls keyfile'.
      smb.conf(5): Add basic documentation for 'tls certfile'.
      smb.conf(5): Add basic documentation for 'tls crlfile'.
      smb.conf(5): Add basic documentation for 'tls enabled'.
      smb.conf(5): Add basic documentation for 'tls dh params file'.
      smb.conf(5): Add 'socket address' as alias for 'nbt client socket address'.
      smb.conf(5): Add 'ldap password sync' as synonym for 'ldap passwd sync'.
      smb.conf(5): Add basic documentation for 'afs token lifetime'.
      smb.conf(5): Add basic documentation for 'nsupdate command'.
      smb.conf(5): Fix mixing of tabs and spaces.
      tests: Convert find_missing_doc into a unit test.
      samba.tests.docs: Distinguish between unknown and undocumened parameters.
      samba.tests.docs: Support synonyms.
      samba.tests.docs: Support spaces before synonyms.
      smb.conf(5): Consistent spelling of parameter names.
      samba.tests.docs: Skip tests if xsltproc is not present.
      samba.tests.docs: Write error output from xsltproc to standard out.
      samba.tests.docs: Assume docs are generated by waf.
      smb.conf(5): Mark four removed parameters as such.
      samba.tests.docs: Ignore removed parameters.
      samba-tool user test: Fix expected output.
      pyglue: Mention parameters in interface_ips() docstring.
      pyglue: Make all_interfaces argumen to interface_ips() optional.
      source4.selftest.tests: Consistent naming of smbtorture binary.
      source4.selftest.tests: Rename plansmbtorturesuite() to plansmbtorture4suite().
      selftesthelpers: Share code for listing smbtorture4 tests.
      selftest/selftesthelpers.py: Share configuration variable, strip whitespace.
      selftest/selftesthelpers: Share environment handling for extra smbtorture options.
      selftest: Move determining of smbtorture4 options to selftesthelpers.
      selftesthelpers: Add function for printing smbtorture4 version.
      source4.selftest.tests: Add suffix for smbclient4/nmblookup4.
      source3.selftest.tests: Remove tabs.
      source3.selftest.tests: Add suffix for smbclient3/ntlm_auth3.
      source3.selftests.tests: Use common plansmbtorture4testsuite() function.
      selftesthelpers: Simplify detection of tap2subunit.
      source4.selftest.tests: Add FIXME about database verification.
      selftest: Add --random-order option.
      TestCaseInTempDir: Use addCleanup rather than tearDown.
      selftesthelpers: Fix detection of tap2subunit.
      source3.selftest: Move more variables to be in common.
      source3.selftest: Move last variables to selftesthelpers.
      wafsamba.samba_abi: Refactor abi_write_vscript to take file argument.
      wafsamba.samba_abi: Add basic unit tests.
      wafsamba.abi: Fix abi_match with both excludes and includes.
      dsdb: Rename _res argument to _result.
      ldb_secrets_tdb_sync: Add dependency on gssapi.
      heimdal_build: HEIMDAL_LIBRARY(): Remove unused cflags argument.
      heimdal_build: Fix finding of system heimdal.
      configure: Support specifying PYTHON environment variable to run waf.
      Makefile: Allow specifying PYTHON environment variable.

Jeremy Allison (29):
      Fix bug #9189 - SMB2 Create doesn't return correct MAX ACCESS access mask in blob.
      We now pass "samba3.raw.acls.generic" and "samba3.smb2.acls.GENERIC" with the max access change.
      Fix bug #9213 - Bad ASN.1 NegTokenInit packet can cause invalid free.
      Fix bug #9209 - Parse of invalid SMB2 create blob can cause smbd crash.
      s3: Fix bug 8966, Fix net rpc share allowedusers to work with 2008r2
      Add samba3.samba3badnameblob test to check regressions in bug #9215.
      Reformat spacing to be even.
      Use is_default_acl variable in canonicalise_acl().
      Only apply masks on non-default ACL entries when setting the ACL.
      When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries.
      Add functions to programatically set the security mask and directory security mask parameters.
      When creating a new file/directory, we need to obey the create mask/directory mask parameters.
      Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
      Fix bug #9214 - Bad user supplied SMB2 credit value can cause smbd to call smb_panic.
      Revert "Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2."
      Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
      Revert "When creating a new file/directory, we need to obey the create mask/directory mask parameters."
      Revert "Add functions to programatically set the security mask and directory security mask parameters."
      Remove all uses of lp_security_mask/lp_force_security_mode/lp_dir_security_mask/lp_force_dir_security_mode
      Remove the parameters:
      Update WHATSNEW.txt with removed parameters.
      Ensure the masks don't conflict with the ACL checks.
      Simplify ensure_canon_entry_valid by splitting out the _get codepath.
      Modify ensure_canon_entry_valid() into ensure_canon_entry_valid_on_set() - makes the logic clearer.
      We should never just assign an st_mode to an ace->perms field, theoretically
      Move setting of psd->dacl->revision and protect against null SD's.
      Make sure the returned sd is on the right context, and if not it's always freed.
      Fix bug #9329 - Directory listing with SeBackup can crash smbd.
      Add regression test for bug #9329 - Directory listing with SeBackup can crash smbd.

Joachim Schmitz (1):
      libreplace: Bug 8107, Fix poll replacement to become a msleep replacement

Kai Blin (3):
      s4 dns: Get rid of deprecated allocation result check
      s4 dns: Fix return code for deleted records
      libcli/dns: Time out requests after a while

Karolin Seeger (15):
      RHEL packaging: Try to fix makerpms.sh on RHEL.
      WHATSNEW: Start release notes for Samba 4.0.0rc2.
      WHATSNEW: Add changed parameters.
      librelease.sh: Move the GPG data to the library section.
      docs: Remove duplicate synonym min protocol.
      html docs: Remove link to Using Samba.
      samba-tool: Fix typo in usage.
      samba-tool: Clarify usage of --help.
      docs: Add man 8 samba-tool.
      samba-tool: Unify usage messages.
      samba-tool: Some more unifications...
      docs: Add '-V' to the list of options.
      docs: Add very basic samba manpage.
      smb2_server: Fix typo in comment.
      samba-tool: Fix typo in --help output.

Matthias Dieter Wallnöfer (1):
      s4:dns_server - introduce the wildcard binding feature

Matthieu Patou (25):
      panic action is defined as GLOBAL_VAR(szPanicAction) not GLOBAL_VAR(panic_action)
      s4-dns: fix a non handled memory out of memory
      s4-provision: do not skip setting the acls on sysvol
      getdcinfo: Check that the server object has a serverreference objects pointing to a DC object
      Implement the LIST_INFO_FOR_SERVER input format
      devel-crackname: Print if count > 0
      drs-crackname: if there is no sid do not return the domain
      kcc: return invalid parameter if the taskId is not 0
      drs-getncchanges: do not set the highestUsn to 0
      s4-drs: EXOP_REPL_SECRETS can be called by RW DC as well
      s4-drs: fix the logic to allow REPL_SECRET if the account has GET_ALL_CHANGES
      ldap-server: remove warning for the ret not being used
      ldap-server: sscanf result was never used to mistyped var
      lib-addns: ensure that allocated buffer are pre set to 0
      drs-replica-info: level_not_supported is wrong when we do support (partialy the level)
      drsuapi-idl: Fix the encoding of the source_dsa_dns
      drsuapi: check more carefully the validity of the NC
      drsuapi: Validate the input parameters for the drsuapi_UpdateRefs function
      s4-repl: make dreplsrv_partition_find_for_nc return BAD_NC only
      s4-join: add some documentation
      s4-join: factorize code, add info
      s4-dns: Ignore zones that shouldn't be returned currently
      s4-dns: fix a warning
      s4-dns: Fix the comments about ignoring zones in internal server
      s4-drs: Remove unused var

Michael Adam (39):
      source3/script: fix installman.sh after the last build-manpages-nogit change
      libcli: add a define for the APP_INSTANCE_ID smb2 create context
      s4:libcli: add a app_instance_id member to the smb2_create input struct
      s4:libci: add a SMB2_CREATE_APP_INSTANCE_ID blob to the request if the in.app_instance_id is present
      s4:torture:smb2: add a new test durable-v2-open.app-instance
      selftest: we currently fail smb2.durable-v2-open.app-instance
      s3:winbind:idmap_tdb_common: improve readability of assignment by adding an "if"
      s3:winbind:idmap_tdb_common: improve readability of assignment by adding an "if"
      s4:torture:smb2: fix compound.related3 test to work against windows
      s4:torture:smb2: fix the compound.invalid3 test to work against windows
      s3:smbd:smb2: add check for session_status for compound requests
      s3:smbd:smb2: simplify smbd_smb2_request_validate() and smbd_smb2_request_dispatch()
      s3:smbd: remove struct member smbd_smb2_request.cancelled - it was only written
      s4:torture:smb2: don't skip the compound.interim1 test for non win7/win2k8
      s4:torture:smb2: don't skip the compound.interim2 test for non win7/win2k8
      s4:torture:smb2:compound: remove two unused macros
      selftest: we fail samba3.smb2.compound.interim2
      s3:smbd:smb2: initialize variable in vfs_default_durable_reconnect()
      selftest: skip the samba4.smb2.compound testsuite
      s4:torture:smb2: add a durable-open.read-only test
      s3:smbd: also log the "offline" flag when debugging the dos-mode
      s3:smbd: fix brace placements in validate_my_share_entries() for readability
      s3: fix comment header description for smbd_shim
      s3:smbd: move initialization of the smbd_shim from smbd_init_globals() to main()
      s3:smbd: remove duplicate prototypes for sys_utmp_claim() an sys_utmp_yield()
      s3:auth: remove duplicate propotypes for smb_pam_claim_session and smb_pam_close_session
      s3:smbd/durable: remove an extra blank line from vfs_default_durable_reconnect()
      s3:open_files.idl: add stat-info to vfs_default_durable_cookie.
      s3:smbd:durable: store stat info for disconnected durables and check at reconnect.
      build(waf): Fix the --with-cluster build
      s3:smbd:durable: factor stat checks out into vfs_default_durable_reconnect_check_stat()
      s3:smbd:durable: remove a TODO comment about write time updates
      lib/param: fix function name (lpcfg_file_list_changed) in a debug message
      lib/param: fix function name (set_variable) in debug statements
      lib/param: fix line length of DEBUG statments touched in previous commit in set_variable()
      s3:winbindd:cache: fix offline logons with cached credentials (bug #9321)
      s3:smbd:smb2: fix a comment typo in the crediting code.
      build(waf): fix a tab indentation to spaces
      build(waf): fix the cluster(ctdb) build without system talloc installed

Pierre Lejeune (1):
      pyntdb: Fix init function for ntdb python module.

Ricky Nance (3):
      wscript: Removed executable bit.
      samba-tool domain provision: DNS forwarder default
      Removed phpldapadmin inclusion for Samba 4.

Rusty Russell (6):
      tdb: add tdb_rescue()
      tdb: tdbdump should log errors, and fail in that case.
      tdb: add -e option to tdbdump (and docment it).
      tdb: Make robust against shrinking tdbs
      ntdb: remove unused local variable.
      ccan: check for all the used config.h defines

Simo Sorce (4):
      Support UPN_DNS_INFO in the PAC
      Add memory limiting capability to talloc
      Add tests for talloc_memlimit
      talloc: Convert error cecking macros into fns

Stefan Metzmacher (85):
      packaging/RHEL-CTDB: fix the build
      packaging/RHEL-CTDB: try harder to set $RPMVER
      packaging/RHEL-CTDB: add "BUILD_GPFS=no configure.rpm" and "BUILD_GPFS=no makerpms.sh"
      libcli/smb: fix padding in smb2_create_blob*
      s4:torture/smb2: improve the smb2.create.blob test
      s3:smb2_server: fix usage of invalid memory in smb2_signing_check_pdu()
      dynconfig/config.m4: disallow --prefix=/usr and --prefix=/usr/local without --enable-fhs
      s3:smbd: release the share mode lock before calling exit_server() (bug #9191)
      libcli/echo: validate the message length
      lib/tsocket: fix receiving of udp packets from 0 bytes (bug #9184)
      s4:dns.py: reproducer for (bug #9184)
      s3:smb2_server: reset req->last_session_id and req->last_tid after using it
      s3:smb2_server: do the req->next_status check before the signing checks
      s4:torture:smb2: extend the compound.invalid1 test
      s3:smb2_server: avoid segfault in smbd_smb2_request_pending_queue()
      s3:smb2_lock: let smbd_smb2_lock_cancel() trigger NT_STATUS_CANCELED
      s3:smb2_notify: don't call tevent_req_done() from smbd_smb2_notify_cancel()
      s3:smb2_notify: make use of tevent_req_defer_callback() instead of custom tevent_immediate
      s3:smb2_lock: smbd_smb2_notify_recv() can already return NT_STATUS_CANCELED
      s3:smb2_lock: let smbd_smb2_create_cancel() trigger NT_STATUS_CANCELED
      script/autobuild.py: use some variables for rebase_remote and rebase_branch
      script/autobuild.py: use some variables for push_remote and push_branch
      script/autobuild.py: add --branch option
      script/autobuild.py: add log_base variable to avoid hardcoded values
      script/autobuild.py: add --log-base option
      script/autobuild.py: remove --rebase-master and --push-master options
      script/autobuild.py: set the default for --log-base to the current gitroot
      s4:rpc_server/drsuapi: fix a crash in dcesrv_drsuapi_DsGetDomainControllerInfo_1()
      s4:rpc_server/drsuapi: use talloc_zero instead of talloc() in dcesrv_drsuapi_DsBind()
      s3:smb2_create: don't take 'state->te' as indication for "was_deferred" (bug #9196)
      s4:torture/smb2: remove samba specific stuff from smb2.oplock
      selftest/knownfail: samba*.smb2.oplock.stream1 doesn't work
      libcli/smb: use an explicit TALLOC_FREE(subreq) in smb2cli_*
      libcli/smb: add smb2cli_echo*
      libcli/smb: add smb1cli_echo*
      s3:libsmb: make cli_echo* protocol independent
      s3:libsmb: use smbXcli_conn_remote_name() in smb2_tcon_send()
      s4:tortore/rpc/lsa: make more use of torture_assert*
      s4:samba-tool: add optional epilog to _create_parser()
      s4:samba-tool: use normal option parsing in SuperCommand
      s4:samba-tool: allow 'samba-tool --version'
      s4:scripting/python: add '-V' as alias for '--version'
      Revert "provision: Always create DNS user."
      selftest/knownfail: add samba3.rpc.lsa.privileges.lsa.Privileges
      buildtools/wafsamba: only display 'ok' if the result is True
      s3:smbd: update sconn->remote_hostname after the netbios session request
      s3:smbd: add exit_server to the smbd_shim hooks
      s3:smbd/utmp: remove ip address from utmp record
      s3:configure: check that struct utmp.ut_line is large enough for our use case
      s3:utils/net: remove unused "net connections"
      doc-xml: remove "net connections" documentation
      s3:smbXsrv.idl: add session_global_id to smbXsrv_tcon_global
      s3:smbd: fill tcon->global->session_global_id
      s3:smbd: don't call claim/yield_connection() in make_connection_snum/close_cnum()
      s3:smbd: remove unused claim_connection/yield_connection
      s3:lib: remove unused connections_fetch_entry*() and connections_init()
      docs-xml:smbd.8: document new smbXsrv_*_global.tdb files
      s3:smbd/durable: trigger pending write_time updates before disconnecting the file
      s3:smbd/durable: update the low level write_time before disconnecting the file.
      s3:open_files.idl: add write_time specific stuff to vfs_default_durable_cookie
      s3:smbd/durable: add write_time specific stuff to vfs_default_durable_cookie
      s3:rpc_server: avoid a level 0 DEBUG if tstream_npa_connect_recv fails (bug #9309)
      lib/tsocket: fix loop in tdgram_bsd_recvfrom() (bug #9184)
      s4:dns_server: fix formatting difference compared to v4-0-test
      libcli/smb: fix unitialized padding in smb2_create_blob_push_one() (bug #9209)
      s3:smb2_read: fix SMBD_SMB2_NUM_IOV_PER_REQ check for sendfile() support (bug #9341)
      lib/krb5_wrap: request enc_types in the correct order (bug #9272)
      libcli/smb: add smbXcli_session_set_disconnect_expired() (bug #9175)
      s3:winbindd: disconnection after getting NETWORK_SESSION_EXPIRED (bug #9175)
      s3:winbindd: use PROTOCOL_LATEST instead of PROTOCOL_SMB2_02 (bug #9175)
      lib/tsocket: disable the syscall optimization for recvfrom/readv by default
      lib/tsocket: optimize syscalls in tstream_readv_pdu_send()
      s3:vfs_default: optimize vfswrap_asys_finished() and read as much as we can
      s3:smbd: pass the current time to make_connection[_smb1]()
      selftest/skip: add samba.tests.samba_tool.gpo until it's stable
      s4:dsdb/acl: fix search filter cleanup for password attributes
      s4:dsdb/acl: reorganize the logic flow in the password filtering checks
      s4:dsdb/acl: only give administrators access to attributes marked as confidential (bug #8620)
      s4:dsdb/acl_read: fix whitespace formatting errors
      s4:dsdb/acl_read: make sure confidential attributes require CONTROL_ACCESS (bug #8620)
      lib/addns: remove pointless check for resp->num_additionals != 1
      lib/addns: don't depend on the order in resp->answers[]
      lib/addns: remove compiler warnings
      s4:samba-tool/testparm: report a CommandError if loading of the config file fails
      lib/ldb: add missing newline in the output of ldb_ldif_write_trace()

Sumit Bose (2):
      s3-winbindd: Allow DNS resolution of trusted domains if DNS name is avaliable
      Use work around for 'winbind use default domain' only if it is set

Vladimir Marek (1):
      Fix service control for non-internal services.

Volker Lendecke (54):
      s3: Fix some nonempty line endings
      s3: Use SBVAL in put_long_date_timespec
      s3: Fix idmap_hash
      auth: Fix some nonempty blank lines
      s3-pylibsmb: Factor out py_tevent_cond_wait
      s3: Fix some nonempty line endings
      s3: Add "readdir" to pylibsmb
      s3: Convert cli_oplock_break_waiter to smbXcli
      s3-pylibsmb: Reduce the number of warnings
      s3-pylibsmb: Factor out py_tevent_cond_signal
      s3-pylibsmb: Add get_oplock_break
      s3-pylibsmb: Use Py_RETURN_NONE
      s3: Fix indentation of if-expressions
      s4-torture: Fix some nonemtpy blank lines
      lib: Make async_sock includable on its own
      s3: Make is_stat_open() a bit more readable
      s3: Slightly simplify is_stat_open
      pysmbd: Fix cut&paste errors
      s3: Fix a typo
      s3: Fix some blank line endings
      s3: Slightly simplify smbd_smb2_request_process_negprot
      s3: Factor out calculate_open_access_flags
      s3: Slightly simplify calculate_open_access_flags
      s3: Slightly simplify calculate_open_access_flags
      Coding: Add comment disproving control-flow changing macros
      s3: Slightly simplify open_file()
      s4: Fix a -Wunused-value warning
      s3: Fix rejecting mkdir on read-only shares
      s3: For read-only shares, filter out write bits from conn->access_mask
      s3: Fix some blank line endings
      s3: Copy share mode handling from before to after open_file
      s3: Fix fcb_or_dos_open after logic change
      s3: Remove share mode handling before we open the file
      s3: No code change, just re-indent
      s3: Close the now opened file descriptor in error paths
      s3: Remove a SMB_ASSERT
      s3: Fix opening a file under kernel oplocks
      tdb: Fix a typo
      tdb: Make tdb robust against improper CLEAR_IF_FIRST restart
      s3: Add two tests a CLEAR_IF_FIRST crash
      s3: Pass down smb_filename to smbacl4_fill_ace4
      s3: Remove some calls to procid_self
      s3: Fix a typo
      s3: Make winbindd_register_handlers static
      s3: Add "msg_ctx" param to winbindd_register_handlers()
      s3: Remove a call to procid_self()
      s3: Use talloc_stackframe in token_contains_name_in_list
      s3: Fix some blank line endings
      s3: Fix some nonempty line endings
      s3: Use file_id_string in file_id_string_tos
      dsdb: Simplify DsCrackNameOneFilter a bit
      lib/util: Make "struct bitmap" abstract
      lib/util: Simplify bitmap.c a bit
      Remove two unused variables


Samba Shared Repository

More information about the samba-cvs mailing list