[SCM] Samba Shared Repository - branch v4-0-stable updated

Karolin Seeger kseeger at samba.org
Tue Oct 16 02:14:20 MDT 2012


The branch, v4-0-stable has been updated
       via  fa4b3c9 VERSION: Set valid value for SAMBA_VERSION_IS_SVN_SNAPSHOT.
       via  a3a7724 VERSION: Disable git snapshots for 4.0.0rc3.
       via  293b100 WHATSNEW: Update changes since rc2.
       via  97954c8 s4-dns: Ignore zones that shouldn't be returned currently
       via  4a774ab kcc: return invalid parameter if the taskId is not 0
       via  203908d libcli/dns: Time out requests after a while
       via  4a98baf s4-repl: make dreplsrv_partition_find_for_nc return BAD_NC only
       via  d26fcd4 drsuapi-idl: Fix the encoding of the source_dsa_dns
       via  e7c2853 drs-replica-info: level_not_supported is wrong when we do support (partialy the level)
       via  88c9751 lib-addns: ensure that allocated buffer are pre set to 0
       via  0aed1b5 ldap-server: sscanf result was never used due to mistyped var
       via  848d0d9 ldap-server: remove warning for the ret not being used
       via  473170d s4-drs: fix the logic to allow REPL_SECRET if the account has GET_ALL_CHANGES
       via  2133f90 s4-drs: EXOP_REPL_SECRETS can be called by RW DC as well
       via  792cac9 drs-getncchanges: do not set the highestUsn to 0
       via  0ba137f drs-crackname: if there is no sid do not return the domain
       via  5aad3a5 Implement the LIST_INFO_FOR_SERVER input format
       via  1d13a9b WHATSNEW: Add more changes since rc2.
       via  d5c51e9 WHATSNEW: Start release notes for Samba 4.0.0rc3.
       via  1f1bc49 docs: Add very basic samba manpage.
       via  e2d1cb7 s3-printing: Increase debug level for info that the db is empty.
       via  8bd3ada packaging: Add support for reloading systemd services.
       via  5881b1e s4:torture/smb2: improve the smb2.create.blob test
       via  ba24443 autoconf: fix --with(out)-sendfile-support option handling
       via  90021dc Remove obsolete land-remote.py and land.py scripts.
       via  eb84959 script/autobuild.py: set the default for --log-base to the current gitroot
       via  790f615 script/autobuild.py: remove --rebase-master and --push-master options
       via  039396c packaging: Add config for systemd-tmpfiles.
       via  cb2d638 RHEL packaging: Try to fix makerpms.sh on RHEL.
       via  5db52d1 packaging: apply some solaris packaging fixes
       via  637e4b9 docs: Add '-V' to the list of options.
       via  a29f1a3 docs: Add man 8 samba-tool.
       via  d800f9f smb.conf(5): Add basic documentation for 'dcerpc endpoint servers'.
       via  b61b742 smb.conf(5): List 'protocol' as alias for 'server max protocol'.
       via  e116d6d smb.conf(5): Add documentation for 'client max protocol'.
       via  cb4d2e6 smb.conf(5): Add basic documentation for 'client min protocol'.
       via  ae360eb smb.conf(5): Document 'share backend' parameter.
       via  7ca2246 smb.conf(5): Extend 'server min protocol' description.
       via  bb56df0 smb.conf(5): Consistent spelling of parameter names.
       via  7944e1a smb.conf(5): Add basic documentation for 'rpc bigendian'.
       via  bed7930 smb.conf(5): Add basic documentation for 'kpasswd port'.
       via  27bedb5 smb.conf(5): Add basic documentation for 'dgram port'.
       via  69f224c smb.conf(5): Add basic documentation for 'unicode'.
       via  5890e06 smb.conf(5): Add basic documentation for 'web port'.
       via  17b8208 smb.conf(5): Add basic documentation for 'nbt port'.
       via  21a5e02 smb.conf(5): Add basic documentation for 'krb5 port'.
       via  56a5b2b smb.conf(5): 'write ok' is a reverse synonym for 'read only'.
       via  ba0742f smb.conf(5): Distinguish parametric options.
       via  db22a41 find_missing_doc: Convert to python.
       via  d1b0134 find_missing_manpages: convert to python
       via  bb274cc find_missing_manpages: Ignore make variables.
       via  6df7522 smb.conf(5): Remove documentation for removed 'lock spin count' parameter.
       via  7202c3b Remove unused neatquotes script.
       via  8978845 smb.conf.5: Document 'cldap port'.
       via  dae25b8 undocumented: Drop extension from helper scripts.
       via  c06c98e s3-docs: add delete_lost option to vfs_streams_depot.8
       via  c8b5941 docs: Change TOSHARG-VFS to avoid suggesting VFS modules are Linux/IRIX only
       via  aec004e docs: Remove mention of auth methods in TOSHARG-Passdb
       via  9398356 docs: Fix typo in TOSHARG-Passdb
       via  380e635 docs: Update TOSHARG-Install
       via  9873e62 docs: Remove another reference to security=share
       via  a3e01a3 docs: Remove references to specific windows versions, instead mention Home/Professional/Server
       via  b5c9cb0 docs: Remove references to mulitple passdb backends
       via  6ae3b85 docs: Remove references to sysv-style CUPS from TOSHARG-CUPS-printing
       via  92dfd11 docs: Remove very outdated TOSHARG-Other-Clients section
       via  7670903 docs: Remove very outdated TOSHARG-Portability section
       via  87e33c9 docs: Update FastStart: remove security=share, avoid disable spoolss
       via  49090ea docs: Clarify TOSHARG-Bugs for 2012
       via  23878d9 docs: Remove reference to inetd startup, it is not recommended
       via  c1f7a82 docs: Update BDC docs to recognise the AD DC and to exclusivly recommend LDAP
       via  7f25c89 docs: Remove referenece to old Red Hat Linux habits on winbindd
       via  f33fce0 docs: Remove referenece to autogen.sh and document waf build instead
       via  354cbc9 docs: Remove out of date links to pserver.samba.org and old tarballs
       via  9f3525b docs: Remove references to Subversion, replace with wiki link
       via  34649d0 docs: Remove references to old kerberos behaviour
       via  b1849d2 docs: Remove confusing reference to smb signing and client use spnego
       via  a4a6586 docs: update for modern kerberos libs
       via  e185ede docs: remove references to security=server
       via  39698c9 docs: Remove distinction between server and domain accounts
       via  ea9d2b2 docs: Update docs to the modern age of Samba 4.0
       via  e3de980 vfs: check full_audit enum->str mapping on startup
       via  0f9d857 vfs: add missing pwrite ops to full_audit
       via  bdaf167 vfs: fix acl_blob_get* in vfs_full_audit
       via  dbed19b vfs: fix lock logging in vfs_full_audit (cherry picked from commit 47becf6e20a970d273afab8be176d8cbe5ab2b9c)
       via  6644557 samba-tool: Some more unifications...
       via  3817492 samba-tool: skip chown in sysvolreset when it would fail on a GID
       via  3c63021 s4:scripting/python: add '-V' as alias for '--version'
       via  3b465d8 s4:samba-tool: allow 'samba-tool --version'
       via  70561ec s4:samba-tool: use normal option parsing in SuperCommand
       via  f1e5f73 s4:samba-tool: add optional epilog to _create_parser()
       via  e243d33 samba-tool: Unify usage messages.
       via  d2a8b70 samba-tool: Clarify usage of --help.
       via  9650cd9 samba-tool: Fix typo in usage.
       via  cd1f38e s4-join: factorize code, add info (cherry picked from commit 95ea6d765b98d9cbdebaa8e23aad91525d94ad40)
       via  564214c s4-join: add some documentation (cherry picked from commit d57e0d8a6d213543a772a517551cca053cece85e)
       via  9e09cfa devel-crackname: Print if count > 0 (cherry picked from commit e332f989091411602ef7f286ebb2f5b1462550e4)
       via  f2f7953 s4: samba_backup: Fix typos.
       via  2c1723b provision: Use logger rather than print.
       via  54dfa75 s4-provision: do not skip setting the acls on sysvol
       via  475c8d8 sanba.upgradehelpers: Use standard functionality for getting temp dir. (cherry picked from commit 0883e174bfdec22a4ff373041afce396cfe7fd7b)
       via  041ad02 s4-python: Various formatting fixes.
       via  d10f27d samba.tests.source: Check for trailing whitespace in Python files. (cherry picked from commit 6986f7bdda56d693c642945485006f9660053758)
       via  46767ea samba-tool domain provision: DNS forwarder default
       via  f476503 samba-tool: Hide 'samba-tool domain samba3upgrade'.
       via  6dfb2d1 samba_dnsupdate: Safely update/create names for Samba3 targets as well
       via  995cc1e samba_dnsupdate: Move to using tmpfile/rename to keep the dns_hosts_file consistent
       via  1b1a2b7 selftest: Remove invalid security=share and rename secshare to simpleserver
       via  8e1644b s4-python: Override SIGINT handler in scripts only.
       via  905898c samba-tool domain provision: DNS forwarder is not a boolean.
       via  9bdf0ec samba-tool domain-provision: Avoid python2.5-isms. (cherry picked from commit 6641d76562db10e6289c5e819b1296d8f6df37bf)
       via  37528e9 samba-tool domain-provision: Fix docstring. (cherry picked from commit 61ce3e871a1fc1d16202d337d74c2e10f64b2c86)
       via  6b5c78f Correct command help message
       via  5b291e3 s4-python: Formatting fixes, break lines.
       via  2a1e9c8 samba.netcmd: Formatting fixes, break lines. (cherry picked from commit 0ff2ea56d97cd8df7abeea8e819d7ec0bfd5b886)
       via  be235ce samba.provision.common: Fix formatting. (cherry picked from commit ebcb6a744791478bfc4be0b94733ace540ab06bc)
       via  57b4329 samba.provision.sambadns: Fix formatting. (cherry picked from commit cd7dcf4571b321f39eda07c489dd16833d8d4185)
       via  ec4c6b7 samba.provision.backend: Fix formatting. (cherry picked from commit 858135920d54662a06252deac4dbf9191a251018)
       via  1c3bd71 samba.provision: Fix formatting, NameErrors. (cherry picked from commit fdb873a203695f0b208967a561424c0357374e5b)
       via  d57b4b0 replace: Avoid returning value in void setproctitle() replacement.
       via  46b374c Remove compatibility code for setproctitle() now moved to libreplace.
       via  415a0fc replace: Support setproctitle().
       via  a6a95d8 libreplace: Bug 8107, Fix poll replacement to become a msleep replacement
       via  4dbf408 replace: add some includes for poll.h
       via  26e9783 pam_winbind: match more return codes when wbcGetPwnam has failed.
       via  fbeda97 Correct fix for bug #9222 - smbd ignores the "server signing = no" setting for SMB2.
       via  6a8b5fe s3fs-printing: Fix RAW printing for normal users.
       via  938b037 s3: Add two tests a CLEAR_IF_FIRST crash
       via  4c968fc tdb: Make tdb robust against improper CLEAR_IF_FIRST restart
       via  cb2f7c9 tdb: Make robust against shrinking tdbs
       via  566e450 s4-dns: fix a warning
       via  9178fb3 Fix bug #9214 - Bad user supplied SMB2 credit value can cause smbd to call smb_panic.
       via  56ffe75 waf: Build pam_smbpass module only if enabled.
       via  17c22a1 s3fs-smbd: Make sure the registry is set up before we init printing.
       via  c4cb4c4 docs: Remove duplicate synonym min protocol.
       via  5aabd6c smb.conf(5): Add basic documentation for 'server min protocol'.
       via  bb82ac2 html docs: Remove link to Using Samba.
       via  42d2af9 Fix net rpc share allowedusers to work with 2008r2
       via  f480cc4 s3-docs: Fix opening and ending tag mismatch in Samba3-HOWTO (Bug #9235)
       via  f3e6072 docs: Remove Win9X/WinMe mentions from TOSHARG-PDC (cherry picked from commit e3f554a99f3871eabac35db1ba3236772ef58f64)
       via  2fe3c52 docs: Add mention of AD DC support in TOSHARG-PDC (cherry picked from commit f82affaa6defef52696f69f114143cfb80fee241)
       via  1e672c2 docs: Explain the no-domain-logons restriction applies to all HOME editions (cherry picked from commit 6fcb95bad7db8f970ae6c74f1fdd7b4c2a41f25c)
       via  eae9db6 docs: Remove references to default paramters in TOSHARG-PDC (cherry picked from commit 3be323c6110f1a241f86aacb94c8ff1ba69351c5)
       via  1a0c013 s4 dns: Fix return code for deleted records
       via  8d25b8a s4:dns_server - introduce the wildcard binding feature
       via  ddd07ae s4: Fix a -Wunused-value warning
       via  ba8b5e3 selftest/knownfail: samba*.smb2.oplock.stream1 doesn't work
       via  b2c591c s4:torture/smb2: remove samba specific stuff from smb2.oplock
       via  c420163 s3:smb2_create: don't take 'state->te' as indication for "was_deferred" (bug #9196)
       via  2248884 Fix bug #9209 - Parse of invalid SMB2 create blob can cause smbd crash.
       via  ff47fcd libcli/smb: fix padding in smb2_create_blob*
       via  d190b59 VERSION: Bump version up to 4.0.0rc3.
      from  cc9315a VERSION: Bump version number up to 4.0.0rc2.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-stable


- Log -----------------------------------------------------------------
commit fa4b3c953c1addcac75ddea2d1a50b38d43fb668
Author: Karolin Seeger <kseeger at samba.org>
Date:   Tue Oct 16 09:39:47 2012 +0200

    VERSION: Set valid value for SAMBA_VERSION_IS_SVN_SNAPSHOT.
    
    Karolin

-----------------------------------------------------------------------

Summary of changes:
 VERSION                                            |    2 +-
 WHATSNEW.txt                                       |  112 +++-
 buildtools/wafsamba/nothreads.py                   |    6 +-
 buildtools/wafsamba/samba_abi.py                   |    2 +-
 buildtools/wafsamba/samba_autoconf.py              |   10 +-
 buildtools/wafsamba/samba_bundled.py               |    2 +-
 buildtools/wafsamba/samba_deps.py                  |    8 +-
 buildtools/wafsamba/samba_dist.py                  |    4 +-
 buildtools/wafsamba/samba_headers.py               |    1 -
 buildtools/wafsamba/samba_optimisation.py          |    2 +-
 buildtools/wafsamba/samba_patterns.py              |    2 +-
 buildtools/wafsamba/samba_utils.py                 |   10 +-
 buildtools/wafsamba/samba_version.py               |    2 +-
 buildtools/wafsamba/stale_files.py                 |    2 +-
 buildtools/wafsamba/wafsamba.py                    |    4 +-
 docs-xml/Makefile                                  |    6 +-
 docs-xml/Samba3-HOWTO/TOSHARG-BDC.xml              |  179 +-----
 docs-xml/Samba3-HOWTO/TOSHARG-Bugs.xml             |   11 +-
 docs-xml/Samba3-HOWTO/TOSHARG-CUPS-printing.xml    |   75 +--
 docs-xml/Samba3-HOWTO/TOSHARG-Compiling.xml        |  272 +-------
 docs-xml/Samba3-HOWTO/TOSHARG-Diagnosis.xml        |   40 +-
 docs-xml/Samba3-HOWTO/TOSHARG-DomainMember.xml     |  158 +----
 docs-xml/Samba3-HOWTO/TOSHARG-FastStart.xml        |   22 +-
 docs-xml/Samba3-HOWTO/TOSHARG-Install.xml          |   20 +-
 docs-xml/Samba3-HOWTO/TOSHARG-Other-Clients.xml    |  351 ---------
 docs-xml/Samba3-HOWTO/TOSHARG-PDC.xml              |  387 ++---------
 docs-xml/Samba3-HOWTO/TOSHARG-Passdb.xml           |   52 +--
 docs-xml/Samba3-HOWTO/TOSHARG-Portability.xml      |  270 -------
 docs-xml/Samba3-HOWTO/TOSHARG-ServerType.xml       |  272 +-------
 docs-xml/Samba3-HOWTO/TOSHARG-VFS.xml              |    3 +-
 docs-xml/Samba3-HOWTO/index.xml                    |    4 -
 docs-xml/htmldocs.html                             |    4 -
 docs-xml/manpages/samba-tool.8.xml                 |  613 ++++++++++++++++
 docs-xml/manpages/samba.8.xml                      |  181 +++++
 docs-xml/manpages/vfs_streams_depot.8.xml          |   19 +
 docs-xml/scripts/find_missing_doc                  |   83 +++
 docs-xml/scripts/find_missing_doc.pl               |   62 --
 docs-xml/scripts/find_missing_manpages             |   71 ++
 docs-xml/scripts/find_missing_manpages.pl          |   39 -
 docs-xml/scripts/neatquotes.pl                     |   12 -
 docs-xml/smbdotconf/base/sharebackend.xml          |   18 +
 docs-xml/smbdotconf/locking/lockspincount.xml      |   12 -
 docs-xml/smbdotconf/misc/nishomedir.xml            |    2 +-
 docs-xml/smbdotconf/misc/rpcdaemon.xml             |    2 +-
 docs-xml/smbdotconf/misc/rpcserver.xml             |    2 +-
 docs-xml/smbdotconf/printing/addportcommand.xml    |    2 +-
 docs-xml/smbdotconf/protocol/cldapport.xml         |   13 +
 docs-xml/smbdotconf/protocol/clientmaxprotocol.xml |   78 ++
 docs-xml/smbdotconf/protocol/clientminprotocol.xml |   19 +
 .../smbdotconf/protocol/dcerpcendpointservers.xml  |   12 +
 docs-xml/smbdotconf/protocol/dgramport.xml         |   11 +
 docs-xml/smbdotconf/protocol/nbtport.xml           |   12 +
 docs-xml/smbdotconf/protocol/rpcbigendian.xml      |   16 +
 docs-xml/smbdotconf/protocol/servermaxprotocol.xml |    1 +
 docs-xml/smbdotconf/protocol/serverminprotocol.xml |   22 +-
 docs-xml/smbdotconf/protocol/unicode.xml           |   13 +
 docs-xml/smbdotconf/protocol/webport.xml           |   12 +
 docs-xml/smbdotconf/security/clientntlmv2auth.xml  |    2 +-
 docs-xml/smbdotconf/security/kpasswdport.xml       |   12 +
 docs-xml/smbdotconf/security/krb5port.xml          |   11 +
 docs-xml/smbdotconf/security/readonly.xml          |    1 +
 docs-xml/smbdotconf/security/serversigning.xml     |   17 +-
 lib/addns/dnsmarshall.c                            |   24 +-
 lib/replace/README                                 |    1 +
 lib/replace/poll.c                                 |    8 +-
 lib/replace/replace.c                              |    6 +
 lib/replace/replace.h                              |    9 +
 lib/replace/wscript                                |    2 +
 lib/tdb/common/io.c                                |   32 +-
 lib/tdb/common/open.c                              |   32 +-
 libcli/dns/dns.c                                   |    8 +
 libcli/smb/smb2_create_blob.c                      |   46 +-
 librpc/idl/drsuapi.idl                             |    2 +-
 nsswitch/pam_winbind.c                             |    3 +
 packaging/RHEL/samba.spec.tmpl                     |    2 +-
 packaging/Solaris/README                           |   10 +-
 packaging/Solaris/makepkg.sh                       |   24 +-
 packaging/systemd/README                           |   14 +
 packaging/systemd/nmb.service                      |    1 +
 packaging/systemd/samba.conf.tmp                   |    1 +
 packaging/systemd/samba.service                    |    1 +
 packaging/systemd/smb.service                      |    1 +
 packaging/systemd/winbind.service                  |    1 +
 script/autobuild.py                                |   35 +-
 script/land-remote.py                              |  113 ---
 script/land.py                                     |  741 --------------------
 selftest/knownfail                                 |    2 +
 selftest/target/Samba3.pm                          |   24 +-
 source3/Makefile.in                                |    2 +-
 source3/configure.in                               |   35 +-
 source3/modules/vfs_full_audit.c                   |   37 +-
 source3/pam_smbpass/wscript_build                  |    3 +-
 source3/printing/printer_list.c                    |    3 +-
 source3/printing/printspoolss.c                    |    2 +-
 source3/selftest/tests.py                          |    6 +-
 source3/smbd/server.c                              |    8 +-
 source3/smbd/smb2_create.c                         |    5 +-
 source3/smbd/smb2_server.c                         |    7 +-
 source3/torture/torture.c                          |   56 ++
 source3/utils/net_rpc.c                            |   81 ++-
 source3/wscript                                    |    3 +
 source4/cldap_server/netlogon.c                    |    2 +-
 source4/dns_server/dns_server.c                    |   56 ++-
 source4/dns_server/dns_utils.c                     |    2 +-
 source4/dsdb/kcc/kcc_drs_replica_info.c            |   22 +-
 source4/dsdb/repl/drepl_partitions.c               |    9 +-
 source4/dsdb/samdb/cracknames.c                    |  109 +++
 source4/ldap_server/ldap_server.c                  |    6 +-
 source4/rpc_server/drsuapi/dcesrv_drsuapi.c        |    7 +-
 source4/rpc_server/drsuapi/getncchanges.c          |   47 +-
 source4/scripting/bin/samba-tool                   |    7 +
 source4/scripting/bin/samba_backup                 |    4 +-
 source4/scripting/bin/samba_dnsupdate              |   44 +-
 source4/scripting/bin/samba_kcc                    |  117 ++--
 source4/scripting/bin/samba_upgradeprovision       |   22 +-
 source4/scripting/bin/smbstatus                    |    8 +-
 source4/scripting/bin/subunitrun                   |    6 +
 source4/scripting/devel/crackname                  |    7 +-
 source4/scripting/python/pyglue.c                  |    7 -
 source4/scripting/python/samba/__init__.py         |    2 +-
 source4/scripting/python/samba/dbchecker.py        |    8 +-
 source4/scripting/python/samba/drs_utils.py        |    2 +-
 source4/scripting/python/samba/getopt.py           |    2 +-
 source4/scripting/python/samba/idmap.py            |    2 -
 source4/scripting/python/samba/join.py             |   77 ++-
 source4/scripting/python/samba/kcc_utils.py        |   46 +-
 source4/scripting/python/samba/ms_schema.py        |   34 +-
 source4/scripting/python/samba/netcmd/__init__.py  |   43 +-
 source4/scripting/python/samba/netcmd/dbcheck.py   |    2 +-
 .../scripting/python/samba/netcmd/delegation.py    |   32 +-
 source4/scripting/python/samba/netcmd/dns.py       |  151 ++--
 source4/scripting/python/samba/netcmd/domain.py    |  241 ++++---
 source4/scripting/python/samba/netcmd/drs.py       |   12 +-
 source4/scripting/python/samba/netcmd/dsacl.py     |    4 +-
 source4/scripting/python/samba/netcmd/fsmo.py      |   10 +-
 source4/scripting/python/samba/netcmd/gpo.py       |   30 +-
 source4/scripting/python/samba/netcmd/group.py     |   14 +-
 source4/scripting/python/samba/netcmd/ldapcmp.py   |    9 +-
 source4/scripting/python/samba/netcmd/main.py      |    6 +
 source4/scripting/python/samba/netcmd/ntacl.py     |   28 +-
 source4/scripting/python/samba/netcmd/rodc.py      |    4 +-
 source4/scripting/python/samba/netcmd/sites.py     |   11 +-
 source4/scripting/python/samba/netcmd/spn.py       |   47 +-
 source4/scripting/python/samba/netcmd/testparm.py  |   20 +-
 source4/scripting/python/samba/netcmd/time.py      |    5 +-
 source4/scripting/python/samba/netcmd/user.py      |   41 +-
 source4/scripting/python/samba/netcmd/vampire.py   |    2 +-
 source4/scripting/python/samba/ntacls.py           |   55 ++-
 .../scripting/python/samba/provision/__init__.py   |  174 +++---
 .../scripting/python/samba/provision/backend.py    |    3 +-
 source4/scripting/python/samba/provision/common.py |    2 -
 .../scripting/python/samba/provision/sambadns.py   |  183 ++++--
 source4/scripting/python/samba/samba3/__init__.py  |    5 +
 source4/scripting/python/samba/samdb.py            |    1 -
 source4/scripting/python/samba/schema.py           |    8 +-
 source4/scripting/python/samba/sd_utils.py         |    9 +-
 source4/scripting/python/samba/tests/auth.py       |    4 +-
 source4/scripting/python/samba/tests/core.py       |    4 +-
 .../scripting/python/samba/tests/credentials.py    |    6 +-
 .../scripting/python/samba/tests/dcerpc/bare.py    |   12 +-
 .../python/samba/tests/dcerpc/registry.py          |    2 +-
 .../scripting/python/samba/tests/dcerpc/unix.py    |    2 +-
 source4/scripting/python/samba/tests/dns.py        |   55 ++-
 source4/scripting/python/samba/tests/gensec.py     |   10 +-
 source4/scripting/python/samba/tests/hostconfig.py |    4 +-
 source4/scripting/python/samba/tests/messaging.py  |    2 +-
 source4/scripting/python/samba/tests/posixacl.py   |    6 +-
 source4/scripting/python/samba/tests/provision.py  |   14 +-
 source4/scripting/python/samba/tests/registry.py   |    2 +-
 source4/scripting/python/samba/tests/samba3.py     |    5 +-
 source4/scripting/python/samba/tests/samba3sam.py  |  132 ++--
 .../python/samba/tests/samba_tool/ntacl.py         |    8 +-
 source4/scripting/python/samba/tests/samdb.py      |   10 +-
 source4/scripting/python/samba/tests/source.py     |   17 +-
 .../python/samba/tests/upgradeprovision.py         |    2 +-
 source4/scripting/python/samba/tests/xattr.py      |    2 +-
 source4/scripting/python/samba/upgrade.py          |   23 +-
 source4/scripting/python/samba/upgradehelpers.py   |   13 +-
 source4/smbd/process_onefork.c                     |   13 -
 source4/smbd/process_prefork.c                     |   13 -
 source4/smbd/process_standard.c                    |   13 -
 source4/torture/smb2/create.c                      |   93 +++-
 source4/torture/smb2/oplock.c                      |   10 -
 183 files changed, 3261 insertions(+), 4079 deletions(-)
 delete mode 100644 docs-xml/Samba3-HOWTO/TOSHARG-Other-Clients.xml
 delete mode 100644 docs-xml/Samba3-HOWTO/TOSHARG-Portability.xml
 create mode 100644 docs-xml/manpages/samba-tool.8.xml
 create mode 100644 docs-xml/manpages/samba.8.xml
 create mode 100755 docs-xml/scripts/find_missing_doc
 delete mode 100755 docs-xml/scripts/find_missing_doc.pl
 create mode 100755 docs-xml/scripts/find_missing_manpages
 delete mode 100755 docs-xml/scripts/find_missing_manpages.pl
 delete mode 100755 docs-xml/scripts/neatquotes.pl
 create mode 100644 docs-xml/smbdotconf/base/sharebackend.xml
 delete mode 100644 docs-xml/smbdotconf/locking/lockspincount.xml
 create mode 100644 docs-xml/smbdotconf/protocol/cldapport.xml
 create mode 100644 docs-xml/smbdotconf/protocol/clientmaxprotocol.xml
 create mode 100644 docs-xml/smbdotconf/protocol/clientminprotocol.xml
 create mode 100644 docs-xml/smbdotconf/protocol/dcerpcendpointservers.xml
 create mode 100644 docs-xml/smbdotconf/protocol/dgramport.xml
 create mode 100644 docs-xml/smbdotconf/protocol/nbtport.xml
 create mode 100644 docs-xml/smbdotconf/protocol/rpcbigendian.xml
 create mode 100644 docs-xml/smbdotconf/protocol/unicode.xml
 create mode 100644 docs-xml/smbdotconf/protocol/webport.xml
 create mode 100644 docs-xml/smbdotconf/security/kpasswdport.xml
 create mode 100644 docs-xml/smbdotconf/security/krb5port.xml
 create mode 100644 packaging/systemd/README
 create mode 100644 packaging/systemd/samba.conf.tmp
 delete mode 100755 script/land-remote.py
 delete mode 100755 script/land.py


Changeset truncated at 500 lines:

diff --git a/VERSION b/VERSION
index e88690b..9d8878e 100644
--- a/VERSION
+++ b/VERSION
@@ -87,7 +87,7 @@ SAMBA_VERSION_PRE_RELEASE=
 # e.g. SAMBA_VERSION_RC_RELEASE=1                      #
 #  ->  "3.0.0rc1"                                      #
 ########################################################
-SAMBA_VERSION_RC_RELEASE=2
+SAMBA_VERSION_RC_RELEASE=3
 
 ########################################################
 # To mark SVN snapshots this should be set to 'yes'    #
diff --git a/WHATSNEW.txt b/WHATSNEW.txt
index f214087..d1e36ec 100644
--- a/WHATSNEW.txt
+++ b/WHATSNEW.txt
@@ -1,7 +1,7 @@
 Release Announcements
 =====================
 
-This is the second release candidate of Samba 4.0.  This is *not*
+This is the third release candidate of Samba 4.0.  This is *not*
 intended for production environments and is designed for testing
 purposes only.  Please report any defects via the Samba bug reporting
 system at https://bugzilla.samba.org/.
@@ -58,7 +58,7 @@ Samba3-like logon services provided over CIFS.  We correctly generate
 the infamous Kerberos PAC, and include it with the Kerberos tickets we
 issue.
 
-Samba 4.0.0rc2 ships with two distinct file servers.  We now use the
+Samba 4.0.0rc3 ships with two distinct file servers.  We now use the
 file server from the Samba 3.x series 'smbd' for all file serving by
 default.
 
@@ -162,6 +162,114 @@ smb.conf changes
    winbindd socket directory		New
 
 
+CHANGES SINCE 4.0.0rc2
+======================
+
+o   Jeremy Allison <jra at samba.org>
+    * BUG 8966: Fix 'net rpc share allowedusers' to work with 2008r2.
+    * BUG 9209: Parse of invalid SMB2 create blob can cause smbd crash.
+    * BUG 9214: Bad user supplied SMB2 credit value can cause smbd to call
+      smb_panic.
+    * BUG 9222: Document that signing cannot be disabled for SMB2 by design.
+
+
+o   Andrew Bartlett <abartlet at samba.org>
+    * BUG 9235: Update Samba3-HOWTO Collection.
+    * BUG 9271: samba-tool: Skip chown in sysvolreset when it would fail on
+      a GID.
+    * BUG 9274: Update Samba3-HOWTO Collection.
+
+
+o   Björn Baumbach <bb at sernet.de>
+    * BUG 9235: Fix opening and ending tag mismatch in Samba3-HOWTO.
+    * BUG 9271: Fix typos in samba_backup.
+    * BUG 9274: Add delete_lost option to vfs_streams_depot.8.
+
+
+o   Kai Blin <kai at samba.org>
+    * BUG 9225: Fix return code for deleted DNS records.
+    * BUG 8878: Time out UDP requests after DNS_REQUEST_TIMEOUT seconds.
+
+
+o   Günther Deschner <gd at samba.org>
+    * BUG 9177: pam_winbind: Match more return codes when wbcGetPwnam has
+    failed.
+
+
+o   David Disseldorp <ddiss at samba.org>
+    * BUG 9269: Fix 64bit-portability-issue.
+
+
+o   Björn Jacke <bj at sernet.de>
+    * BUG 5670: Apply some Solaris packaging fixes.
+    * BUG 8107: Fix poll replacement to become a msleep replacement.
+    * BUG 8344: Fix --with(out)-sendfile-support option handling.
+
+
+o   Volker Lendecke <vl at samba.org>
+    * BUG 9223: Fix uninitialized variable in the cldap server.
+    * BUG 9268: Make tdb robust against improper CLEAR_IF_FIRST restart.
+
+
+o   Stefan Metzmacher <metze at samba.org>
+    * BUG 9271: Several samba-tool fixes.
+    * BUG 9196: Don't take 'state->te' as indication for "was_deferred".
+
+
+o   Matthieu Patou <mat at matws.net>
+    * BUG 9240: Remove unused variable in DNS server.
+    * BUG 9252: Preliminary tests for dcpromo in Windows 2012 fails with
+      Samba DC.
+    * BUG 9253: Crackname returns a dns domain name even if there is no cracked
+      SID.
+    * BUG 9255: Getncchanges with exop for repl_obj returns highest_usn.
+    * BUG 9256: Getncchanges with exop for repl_obj_with_secrets should always
+      be allowed for RWDC.
+    * BUG 9257: LDAP server has at least one un-initialized variable.
+    * BUG 9258: LDAP server ignore configuration values set in the database for
+      timeout.
+    * BUG 9259: rodc join fails complaining that it can't find a RWDC.
+    * BUG 9260: kccdrs_replica_get_info returns invalid level when non
+      supported should be returned.
+    * BUG 9261: ds_replica_sync fails when specifying a name and not a guid.
+    * BUG 9264: getncchanges returns invalid_parameters when it should return
+      bad_nc.
+    * BUG 9254: DsExecuteKCC returns wrong error code if taskid != 0.
+    * BUG 9265: Bind dlz fails to start if there is a trustedanchors zone.
+
+
+o   Rusty Russell <rusty at rustcorp.com.au>
+    * BUG 9268: Make tdb robust against shrinking tdbs.
+
+
+o   Andreas Schneider <asn at samba.org>
+    * BUG 8769: Fix RAW printing for normal users.
+    * BUG 9112: Increase debug level for info that the db is empty.
+    * BUG 9244: Build pam_smbpass module only if enabled.
+    * BUG 9245: Make sure the registry is set up before we init printing.
+    * BUG 9276: Add config for systemd-tmpfiles.
+    * BUG 9280: Add support for reloading systemd services.
+
+
+o   Karolin Seeger <kseeger at samba.org>
+    * BUG 7826: Remove link to Using Samba.
+    * BUG 8802: Add basic manpages for 'samba' and 'samba-tool'.
+    * BUG 9165: Fix makerpms.sh on RHEL.
+    * BUG 9243: Remove duplicate synonym min protocol.
+    * BUG 9271: Several samba-tool fixes.
+
+
+o   Jelmer Vernooij <jelmer at samba.org>
+    * BUG 9243: Add basic documentation for 'server min protocol'.
+    * BUG 9271: Several samba-tool fixes.
+    * BUG 9274: Add documentation for several parameters.
+
+
+o   Matthias Dieter Wallnöfer <mdw at samba.org>
+    * BUG 9183: Introduce the wildcard binding feature to allow DNS to listen on
+      localhost.
+
+
 CHANGES SINCE 4.0.0rc1
 ======================
 
diff --git a/buildtools/wafsamba/nothreads.py b/buildtools/wafsamba/nothreads.py
index 90babf4..075dcd3 100644
--- a/buildtools/wafsamba/nothreads.py
+++ b/buildtools/wafsamba/nothreads.py
@@ -132,8 +132,10 @@ class Parallel(object):
                 self.frozen = []
             elif not self.count:
                 (jobs, tmp) = self.manager.get_next_set()
-                if jobs != None: self.maxjobs = jobs
-                if tmp: self.outstanding += tmp
+                if jobs is not None:
+                    self.maxjobs = jobs
+                if tmp:
+                    self.outstanding += tmp
                 break
 
     def get_out(self):
diff --git a/buildtools/wafsamba/samba_abi.py b/buildtools/wafsamba/samba_abi.py
index f5cac8a..ed977ba 100644
--- a/buildtools/wafsamba/samba_abi.py
+++ b/buildtools/wafsamba/samba_abi.py
@@ -154,7 +154,7 @@ def abi_process_file(fname, version, symmap):
 
 def abi_write_vscript(vscript, libname, current_version, versions, symmap, abi_match):
     '''write a vscript file for a library in --version-script format
-    
+
     :param vscript: Path to the vscript file
     :param libname: Name of the library, uppercased
     :param current_version: Current version
diff --git a/buildtools/wafsamba/samba_autoconf.py b/buildtools/wafsamba/samba_autoconf.py
index 50039fc..5d3cc5a 100644
--- a/buildtools/wafsamba/samba_autoconf.py
+++ b/buildtools/wafsamba/samba_autoconf.py
@@ -62,9 +62,9 @@ def COMPOUND_END(conf, result):
     conf.check_message_1 = conf.saved_check_message_1
     conf.check_message_2 = conf.saved_check_message_2
     p = conf.check_message_2
-    if result == True:
+    if result:
         p('ok ')
-    elif result == False:
+    elif not result:
         p('not found', 'YELLOW')
     else:
         p(result)
@@ -241,7 +241,7 @@ def CHECK_FUNC(conf, f, link=True, lib=None, headers=None):
 
     conf.COMPOUND_START('Checking for %s' % f)
 
-    if link is None or link == True:
+    if link is None or link:
         ret = CHECK_CODE(conf,
                          # this is based on the autoconf strategy
                          '''
@@ -284,7 +284,7 @@ def CHECK_FUNC(conf, f, link=True, lib=None, headers=None):
                              headers=headers,
                              msg='Checking for macro %s' % f)
 
-    if not ret and (link is None or link == False):
+    if not ret and (link is None or not link):
         ret = CHECK_VARIABLE(conf, f,
                              define=define,
                              headers=headers,
@@ -470,7 +470,7 @@ def CONFIG_SET(conf, option):
     if option not in conf.env:
         return False
     v = conf.env[option]
-    if v == None:
+    if v is None:
         return False
     if v == []:
         return False
diff --git a/buildtools/wafsamba/samba_bundled.py b/buildtools/wafsamba/samba_bundled.py
index 1a5d565..b8a4101 100644
--- a/buildtools/wafsamba/samba_bundled.py
+++ b/buildtools/wafsamba/samba_bundled.py
@@ -78,7 +78,7 @@ def LIB_MAY_BE_BUNDLED(conf, libname):
 
 @conf
 def LIB_MUST_BE_BUNDLED(conf, libname):
-    return ('ALL' in conf.env.BUNDLED_LIBS or 
+    return ('ALL' in conf.env.BUNDLED_LIBS or
             libname in conf.env.BUNDLED_LIBS)
 
 @conf
diff --git a/buildtools/wafsamba/samba_deps.py b/buildtools/wafsamba/samba_deps.py
index f073e41..3220f35 100644
--- a/buildtools/wafsamba/samba_deps.py
+++ b/buildtools/wafsamba/samba_deps.py
@@ -136,7 +136,7 @@ def build_includes(self):
     includes = []
 
     # maybe add local includes
-    if getattr(self, 'local_include', True) == True and getattr(self, 'local_include_first', True):
+    if getattr(self, 'local_include', True) and getattr(self, 'local_include_first', True):
         includes.append('.')
 
     includes.extend(self.samba_includes_extended)
@@ -153,7 +153,7 @@ def build_includes(self):
         t = bld.name_to_obj(d, bld.env)
         bld.ASSERT(t is not None, "Unable to find dependency %s for %s" % (d, self.sname))
         inclist = getattr(t, 'samba_includes_extended', [])[:]
-        if getattr(t, 'local_include', True) == True:
+        if getattr(t, 'local_include', True):
             inclist.append('.')
         if inclist == []:
             continue
@@ -169,7 +169,7 @@ def build_includes(self):
         relpath = os_path_relpath(inc, mypath)
         includes.append(relpath)
 
-    if getattr(self, 'local_include', True) == True and not getattr(self, 'local_include_first', True):
+    if getattr(self, 'local_include', True) and not getattr(self, 'local_include_first', True):
         includes.append('.')
 
     # now transform the includes list to be relative to the top directory
@@ -306,7 +306,7 @@ def check_orphaned_targets(bld, tgt_list):
     debug('deps: checking for orphaned targets')
 
     for t in tgt_list:
-        if getattr(t, 'samba_used', False) == True:
+        if getattr(t, 'samba_used', False):
             continue
         type = target_dict[t.sname]
         if not type in ['BINARY', 'LIBRARY', 'MODULE', 'ET', 'PYTHON']:
diff --git a/buildtools/wafsamba/samba_dist.py b/buildtools/wafsamba/samba_dist.py
index 82492e1..fae2759 100644
--- a/buildtools/wafsamba/samba_dist.py
+++ b/buildtools/wafsamba/samba_dist.py
@@ -98,10 +98,10 @@ def vcs_dir_contents(path):
     return Utils.cmd_output(ls_files_cmd, cwd=cwd, env=env).split()
 
 
-def dist(appname='',version=''):
+def dist(appname='', version=''):
 
     def add_files_to_tarball(tar, srcdir, srcsubdir, dstdir, dstsubdir, blacklist, files):
-        if blacklist == None:
+        if blacklist is None:
             blacklist = []
         for f in files:
             abspath = os.path.join(srcdir, f)
diff --git a/buildtools/wafsamba/samba_headers.py b/buildtools/wafsamba/samba_headers.py
index cca6420..50ccad7 100644
--- a/buildtools/wafsamba/samba_headers.py
+++ b/buildtools/wafsamba/samba_headers.py
@@ -119,7 +119,6 @@ def public_headers_simple(bld, public_headers, header_path=None, public_headers_
             h_name =  h
             inst_name = os.path.basename(h)
         bld.INSTALL_FILES('${INCLUDEDIR}', h_name, destname=inst_name)
-        
 
 
 def PUBLIC_HEADERS(bld, public_headers, header_path=None, public_headers_install=True):
diff --git a/buildtools/wafsamba/samba_optimisation.py b/buildtools/wafsamba/samba_optimisation.py
index 2436e9b..f0f430d 100644
--- a/buildtools/wafsamba/samba_optimisation.py
+++ b/buildtools/wafsamba/samba_optimisation.py
@@ -31,7 +31,7 @@ def apply_incpaths(self):
 
     for path in self.to_list(self.includes):
         if not path in lst:
-            if preproc.go_absolute or path[0] != '/': #os.path.isabs(path):
+            if preproc.go_absolute or path[0] != '/':  # os.path.isabs(path):
                 lst.append(path)
             else:
                 self.env.prepend_value('CPPPATH', path)
diff --git a/buildtools/wafsamba/samba_patterns.py b/buildtools/wafsamba/samba_patterns.py
index dc988c5..615d918 100644
--- a/buildtools/wafsamba/samba_patterns.py
+++ b/buildtools/wafsamba/samba_patterns.py
@@ -21,7 +21,7 @@ def write_version_header(task):
 
 def SAMBA_MKVERSION(bld, target):
     '''generate the version.h header for Samba'''
-    t = bld.SAMBA_GENERATOR('VERSION', 
+    t = bld.SAMBA_GENERATOR('VERSION',
                             rule=write_version_header,
                             source= 'VERSION',
                             target=target,
diff --git a/buildtools/wafsamba/samba_utils.py b/buildtools/wafsamba/samba_utils.py
index c252663..c1869df 100644
--- a/buildtools/wafsamba/samba_utils.py
+++ b/buildtools/wafsamba/samba_utils.py
@@ -256,7 +256,7 @@ def ENFORCE_GROUP_ORDERING(bld):
         @feature('*')
         @before('exec_rule', 'apply_core', 'collect')
         def force_previous_groups(self):
-            if getattr(self.bld, 'enforced_group_ordering', False) == True:
+            if getattr(self.bld, 'enforced_group_ordering', False):
                 return
             self.bld.enforced_group_ordering = True
 
@@ -274,7 +274,7 @@ def ENFORCE_GROUP_ORDERING(bld):
                         debug('group: Forcing up to group %s for target %s',
                               group_name(g), self.name or self.target)
                         break
-                if stop != None:
+                if stop is not None:
                     break
             if stop is None:
                 return
@@ -502,15 +502,15 @@ def CHECK_MAKEFLAGS(bld):
                 if v == 'j':
                     jobs_set = True
                 elif v == 'k':
-                    Options.options.keep = True                
+                    Options.options.keep = True
         elif opt == '-j':
             jobs_set = True
         elif opt == '-k':
-            Options.options.keep = True                
+            Options.options.keep = True
     if not jobs_set:
         # default to one job
         Options.options.jobs = 1
-            
+
 Build.BuildContext.CHECK_MAKEFLAGS = CHECK_MAKEFLAGS
 
 option_groups = {}
diff --git a/buildtools/wafsamba/samba_version.py b/buildtools/wafsamba/samba_version.py
index e82fd47..67ff232 100644
--- a/buildtools/wafsamba/samba_version.py
+++ b/buildtools/wafsamba/samba_version.py
@@ -132,7 +132,7 @@ class SambaVersion(object):
     def __init__(self, version_dict, path, env=None, is_install=True):
         '''Determine the version number of samba
 
-See VERSION for the format.  Entries on that file are 
+See VERSION for the format.  Entries on that file are
 also accepted as dictionary entries here
         '''
 
diff --git a/buildtools/wafsamba/stale_files.py b/buildtools/wafsamba/stale_files.py
index 5a91367..2dd08e1 100644
--- a/buildtools/wafsamba/stale_files.py
+++ b/buildtools/wafsamba/stale_files.py
@@ -47,7 +47,7 @@ def replace_refill_task_list(self):
     # paranoia
     if bin_base[-4:] != '/bin':
         raise Utils.WafError("Invalid bin base: %s" % bin_base)
-    
+
     # obtain the expected list of files
     expected = []
     for i in range(len(bld.task_manager.groups)):
diff --git a/buildtools/wafsamba/wafsamba.py b/buildtools/wafsamba/wafsamba.py
index 50bd4fa..59d3a2c 100644
--- a/buildtools/wafsamba/wafsamba.py
+++ b/buildtools/wafsamba/wafsamba.py
@@ -285,7 +285,7 @@ def SAMBA_LIBRARY(bld, libname, source,
     if pc_files is not None and not private_library:
         bld.PKG_CONFIG_FILES(pc_files, vnum=vnum)
 
-    if (manpages is not None and 'XSLTPROC_MANPAGES' in bld.env and 
+    if (manpages is not None and 'XSLTPROC_MANPAGES' in bld.env and
         bld.env['XSLTPROC_MANPAGES']):
         bld.MANPAGES(manpages)
 
@@ -670,7 +670,7 @@ def SAMBA_SCRIPT(bld, name, pattern, installdir, installname=None):
     bld.SET_BUILD_GROUP('build_source')
     for s in TO_LIST(source):
         iname = s
-        if installname != None:
+        if installname is not None:
             iname = installname
         target = os.path.join(installdir, iname)
         tgtdir = os.path.dirname(os.path.join(bld.srcnode.abspath(bld.env), '..', target))
diff --git a/docs-xml/Makefile b/docs-xml/Makefile
index 0feab24..0b4e880 100644
--- a/docs-xml/Makefile
+++ b/docs-xml/Makefile
@@ -260,9 +260,9 @@ $(PEARSONDIR)/%.report.html: $(PEARSONDIR)/%.xml
 	cd $(<D) && $(XMLLINT) --xinclude --noent --postvalid --noout $(<F)
 
 # Find undocumented parameters
-undocumented: $(SMBDOTCONFDOC)/parameters.all.xml scripts/find_missing_doc.pl scripts/find_missing_manpages.pl
-	$(PERL) scripts/find_missing_doc.pl $(SRCDIR)
-	$(PERL) scripts/find_missing_manpages.pl $(SRCDIR)/source3
+undocumented: $(SMBDOTCONFDOC)/parameters.all.xml scripts/find_missing_doc scripts/find_missing_manpages
+	$(PERL) scripts/find_missing_doc $(SRCDIR)
+	$(PERL) scripts/find_missing_manpages $(SRCDIR)/source3
 
 samples: $(DOCBOOKDIR)/Samba3-HOWTO.xml xslt/extract-examples.xsl scripts/indent-smb.conf.pl
 	@mkdir -p examples
diff --git a/docs-xml/Samba3-HOWTO/TOSHARG-BDC.xml b/docs-xml/Samba3-HOWTO/TOSHARG-BDC.xml
index 5aabb8b..9b69368 100644
--- a/docs-xml/Samba3-HOWTO/TOSHARG-BDC.xml
+++ b/docs-xml/Samba3-HOWTO/TOSHARG-BDC.xml
@@ -47,96 +47,12 @@ you will have stability and operational problems.
 <indexterm><primary>replication</primary><secondary>SAM</secondary></indexterm>
 <indexterm><primary>non-LDAP</primary><secondary>backend</secondary></indexterm>
 <indexterm><primary>propagate</primary></indexterm>
-While it is possible to run a Samba-3 BDC with a non-LDAP backend, that backend must allow some form of
+It is not possible to run a Samba-3 BDC with a non-LDAP backend, as that backend must allow some form of
 "two-way" propagation of changes from the BDC to the master.  At this time only LDAP delivers the capability
 to propagate identity database changes from the BDC to the PDC. The BDC can use a slave LDAP server, while it
 is preferable for the PDC to use as its primary an LDAP master server.
 </para>
 
-<para>
-<indexterm><primary>non-LDAP</primary><secondary>backend</secondary></indexterm>
-<indexterm><primary>SAM backend</primary><secondary>non-LDAP</secondary></indexterm>
-<indexterm><primary>domain</primary><secondary>member</secondary><tertiary>server</tertiary></indexterm>
-<indexterm><primary>BDC</primary></indexterm>
-<indexterm><primary>PDC</primary></indexterm>
-<indexterm><primary>trust account password</primary></indexterm>
-<indexterm><primary>domain trust</primary></indexterm>
-The use of a non-LDAP backend SAM database is particularly problematic because domain member
-servers and workstations periodically change the Machine Trust Account password. The new
-password is then stored only locally. This means that in the absence of a centrally stored
-accounts database (such as that provided with an LDAP-based solution) if Samba-3 is running
-as a BDC, the BDC instance of the domain member trust account password will not reach the
-PDC (master) copy of the SAM. If the PDC SAM is then replicated to BDCs, this results in 
-overwriting the SAM that contains the updated (changed) trust account password with resulting
-breakage of the domain trust.
-</para>
-
-<para>
-<indexterm><primary>net</primary><secondary>rpc</secondary></indexterm>
-<indexterm><primary>SAM backend</primary><secondary>ldapsam</secondary></indexterm>
-<indexterm><primary>SAM backend</primary><secondary>tdbsam</secondary></indexterm>
-<indexterm><primary>replication</primary><secondary>SAM</secondary></indexterm>
-Considering the number of comments and questions raised concerning how to configure a BDC,
-let's consider each possible option and look at the pros and cons for each possible solution.
-<link linkend="pdc-bdc-table">The Domain Backend Account Distribution Options table below</link> lists 
-possible design configurations for a PDC/BDC infrastructure.
-</para>
-
-<table frame="all" id="pdc-bdc-table"><title>Domain Backend Account Distribution Options</title>
-<tgroup cols="3">
-        <colspec align="center" colwidth="1*"/>
-        <colspec align="center" colwidth="1*"/>
-        <colspec align="left" colwidth="3*"/>
-
-        <thead>
-        <row><entry>PDC Backend</entry><entry>BDC Backend</entry><entry>Notes/Discussion</entry></row>
-        </thead>
-        <tbody>
-        <row>
-        <entry><para>Master LDAP Server</para></entry>
-        <entry><para>Slave LDAP Server</para></entry>
-        <entry><para>The optimal solution that provides high integrity. The SAM will be
-		replicated to a common master LDAP server.</para></entry>
-        </row>
-        <row>
-        <entry><para>Single Central LDAP Server</para></entry>
-        <entry><para>Single Central LDAP Server</para></entry>


-- 
Samba Shared Repository


More information about the samba-cvs mailing list