[SCM] Samba Shared Repository - annotated tag samba-4.0.3 created
Karolin Seeger
kseeger at samba.org
Tue Feb 5 06:15:10 MST 2013
The annotated tag, samba-4.0.3 has been created
at a79f022977fb046c39d626b50c96b83cabb0e601 (tag)
tagging 11319b5f1d0c48cefea695f89aa64f72abe1dd3e (commit)
replaces samba-4.0.2
tagged by Karolin Seeger
on Tue Feb 5 13:28:25 2013 +0100
- Log -----------------------------------------------------------------
samba: tag release samba-4.0.3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
iD8DBQBREPvkbzORW2Vot+oRAq4rAJ4hV5AHcS9lNxbSO5a2PwrQ4HqzFgCfYMLS
6o5iI9hS2TjNER1lSkQnWSg=
=/8ec
-----END PGP SIGNATURE-----
Andreas Schneider (2):
s3-rpc_server: Fix a possible null pointer dereference.
BUG 9574: Fix a possible null pointer dereference in spoolss.
Andrew Bartlett (37):
selftest: show that Samba honours "write list" and valid users
vfs: Fix compilation of solaris ACL module
dsdb-acl: give error string if we can not obtain the schema
dsdb-acl: Add helper function dsdb_get_structural_oc_from_msg()
dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_modify()
dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_rename()
dsdb-acl: use dsdb_get_structural_oc_from_msg() rather than class_schemaid_guid_by_lDAPDisplayName
dsdb-acl: ask for the objectClass attribute if it's not in the scope of the clients search
dsdb-acl: Remove unused get_oc_guid_from_message()
dsdb-acl: Pass the structural objectClass into acl_check_access_on_attribute
dsdb-acl: Use the structural objectClass in acl_check_access_on_attribute()
libcli/security: handle node initialisation in one spot in insert_in_object_tree()
libcli/security: remove useless if (root->num_of_children > 0) statements
dsdb: Ensure "authenticated users" is processed for group memberships
dsdb: Explain ordering constraints on the ACL module as well.
drs-fsmo: Improve handling of FSMO role takeover.
dsdb: Do not hold the transaction over the IRPC call to perform a role transfer
torture: Fix fsmo test to use correct -H samba-tool syntax
selftest: Add test of upgradeprovision using the old alpha13 tree
gensec: Allow login without a PAC by default (bug #9581)
build: Remove bashism from SAMBAMANPAGES rule
passdb: Add discard_const_p() to pdb_samba_dsdb
swat: move russian swat files alongside ja and tr
build: Make install_with_python.sh executable
build: In install_with_python.sh force using the python from the install we just made
build: Make install_with_python.sh more portable
heimdal_build: Try again to sort out the strerror_r mess
dsdb: Make linked_attributes module GUID based for renames
dsdb: Make secrets_tdb_sync cope with -H secrets.ldb
bug9598: s4-process_single: Use pid,fd as cluster_id in process_single just like process_prefork
pymessaging: Use correct unsigned types for server ID tuple elememnts
pymessaging: Pass around the server_id struct to python callbacks rather than the tuple
s4-process_single: Use pid,task_id as cluster_id in process_single just like process_prefork
ldb: Change ltdb_unpack_data to take an ldb_context
ldb: Remove no-longer-existing ltdb_unpack_data_free from ldb_tdb.h (cherry picked from commit 4b2f3c6dec997b0dd4bcafeae662a71ebd34e12b)
ldb: Add ldbdump, based on tdbdump
ldb: Ensure to decrement the transaction_active whenever we delete a transaction
Andrew Tridgell (2):
ldb: move ldb_pack.c into common
ldb: fixed callers for ldb_pack_data() and ldb_unpack_data()
Arvid Requate (1):
s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup (bug #9555)
Björn Baumbach (7):
samba_dnsupdate: set KRB5_CONFIG for nsupdate command (bug #9517)
smb.conf(5): update list of available protocols (bug #9552)
ntlm_auth(1): fix format and make examples visible (bug #9569)
wafsamba: use additional xml catalog file (bug #9512)
docs-xml: add dbwrap_tool.1 manual page (fix bug #9568 [1/2])
build(waf): docs-xml: build new dbwrap_tool.8 manual page (fix bug #9568 [2/2])
build(waf)-libreplace: remove redundant check for flistea function
David Disseldorp (2):
printing: Remove invalid free from error path.
BUG 9378: Add extra attributes for AD printer publishing.
Günther Deschner (3):
spoolss: add SPOOLSS_DRIVER_VERSION_2012 (4) define to IDL.
BUG 9474: Downgrade v4 printer driver requests to v3.
s3-winbind: fix the build of idmap_ldap.
Ira Cooper (2):
nsswitch: Fix two bitfield constants being the same.
s3: Fix vfs_zfsacl to compile.
Jelmer Vernooij (1):
wafsamba: python-config is not always a script.
Jeremy Allison (32):
Fix bug #9196 - defer_open is triggered multiple times on the same request.
Start to tidy-up check_user_ok().
Move the definition of struct vuid_cache_entry *ent outside blocks.
Remove one set of enclosing {} braces, no longer needed.
Remove the second set of {} braces, no longer needed. (cherry picked from commit ed0a34d163f777b2a0d4a2b358b7fb1b170d7686)
Remove dead code now vuser can no longer be NULL.
Remove unneeded variable "const struct auth_session_info *session_info"
Remove static from create_share_access_mask().
Fix API for create_share_access_mask().
Change API for create_share_access_mask() to pass in the token.
Change API for create_share_access_mask() - remove conn struct.
Add parallel cache for share_access entries, one per connection struct.
Correctly setup the conn->share_access based on the current user token.
Add check_user_share_access()
Initialize stack variables. Prelude to factoring out calls to check_user_share_access().
Factor code out of check_user_ok() into a call to check_user_share_access().
Fix bug #9518 - conn->share_access appears not be be reset between users.
Move create_share_access_mask() from smbd/service.c to smbd/uid.c
Fixup the change_to_user_by_session() case as called from become_user_by_session()
Add missing check for sys/wait.h
Add ucontext configure waf checks.
Add ucontext configure autoconf checks.
Include sys/ucontext.h if available.
Fix bug 9550 - sigprocmask does not work on FreeBSD to stop further signals in a signal handler
Sort winbind request flags. Ira saw we have a duplicate.
Revert "s3:smbd: SMB ReadX with size > 0xffff should only possible for samba clients."
Fix bug #9572 - File corruption during SMB1 read by Mac OSX 10.8.2 clients.
Fix bug #9586 - smbd[29175]: disk_free: sys_popen() failed" message logged in /var/log/message many times.
Fix bug #9587 - archive flag is always set on directories.
Regression test for bug #9587 - archive flag is always set on directories.
Fix bug #9588 - ACLs are not inherited to directories for DFS shares.
Regression test for bug #9571 - Unlink after open causes smbd to panic
Jesper Larsen (1):
replace: Fix compilation of rep_mkstemp
Karolin Seeger (14):
VERSION: Bump version number up to 4.0.1.
docs: ldb.3.xml: Correct meta data.
docs: ldbadd.1.xml: Correct meta data.
docs: ldbdel.1.xml: Correct meta data.
docs: ldbedit.1.xml: Correct meta data.
docs: ldbmodify.1.xml: Correct meta data.
docs: ldbrename.1.xml: Correct meta data.
docs: ldbsearch.1.xml: Correct meta data.
Merge commit 'samba-4.0.2' into v4-0-test
VERSION: Bump version number up to 4.0.3.
WHATSNEW: Start release notes for Samba 4.0.3.
WHATSNEW: Update release notes.
WHATSNEW: Update release notes.
VERSION: Disable git snapshots for the 4.0.3 release.
Matthieu Patou (9):
dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn't see
dsdb: Fix warning about unused var
libcli-security: Add documentation for object_tree_modify_access
security: Add documentation
drsuapi: Add documentation
libcli-acl: add documentation
dbcheck: look in hasMasterNCs as well for determining the instance type of a NC
Tests: avoid adding python options that are functions in the env
Tests: Fix the display of test vars in screen --testenv
Michael Adam (7):
docs: add an entity stdarg.option for the "--option" command line parameter
docs: use the stdarg.option entity in the popt.common.samba entity
docs: fix the stdarg.configfile entity to print a "=" sign after the long option
docs: add popt.common.samba.server and popt.common.samba.client entities
docs: document the command line options in dbwrap_tool(1)
build(waf): fix the abi_match for the pdb library
ldb: fix a typo in the comment for ldb_req_is_untrusted()
Pavel Shilovsky (1):
Fix bug #9571 - Unlink after open causes smbd to panic.
Rusty Russell (3):
tdb: add tdb_rescue()
tdb: tdbdump should log errors, and fail in that case.
tdb: add -e option to tdbdump (and docment it).
Samba-JP oota (2):
docs: Remove superfluous bracket.
docs: Fix typo in vfs_tsmsm.8.xml.
Stefan Metzmacher (80):
s4:lib/messaging: terminate the irpc_servers_byname() result with server_id_set_disconnected() (bug #9540)
s4:scripting/python: always treat the highwatermark as opaque (bug #9508)
s4:dsdb/repl_meta_data: always treat the highwatermark as opaque (bug #9508)
s4:dsdb/repl_meta_data: store the last results and timestamps in the repsFrom
s4:dsdb/repl_meta_data: also update the last_sync_success in replUpToDateVector
s4:dsdb/repl_meta_data: don't merge highwatermark and uptodatevector (bug #9508)
s4:dsdb/common: use LDB_SEQ_HIGHEST_SEQ for our entry in the uptodatevector
s4:dsdb/common: use 01.01.1970 as last_sync_success for our entry in the uptodatevector
s4:dsdb/drepl: update the source_dsa_obj/invocation_id in repsFrom
s4:drsuapi: move struct drsuapi_getncchanges_state to the top of getncchanges.c
s4:drsuapi: remove unused 'highest_usn' from drsuapi_getncchanges_state
s4:drsuapi: avoid a ldb_dn_copy() and use talloc_move() instead
s4:drsuapi: always use the current uptodateness_vector
s4:drsuapi: add drsuapi_DsReplicaHighWaterMark_cmp()
s4:drsuapi: make sure we never return the same highwatermark twice in a replication cycle (bug #9508)
s4:drsuapi: check the source_dsa_invocation_id (bug #9508)
s4:drsuapi: make sure we report the meta data from the cycle start (bug #9508)
s4:drsuapi: make use of LDB_TYPESAFE_QSORT() and pass getnc_state
s4:drsuapi: try to behave more like windows for usn order (bug #9508)
s3:smb2_negprot: set the 'remote_proto' value (bug #9499)
Merge tag 'samba-4.0.1' into v4-0-test
VERSION: Bump version number up to 4.0.2.
dsdb-acl: don't call dsdb_user_password_support() if we don't use the result
dsdb-acl: talloc_free the private context when we pass to the next module
dsdb-acl: fix the order of special and system checks
libcli/security: don't look at the inherited type in get_ace_object_type()
dsdb-acl: add helper variable 'ldb' in acl_sDRightsEffective
dsdb-acl: calculate sDRightsEffective based on "nTSecurityDescriptor"
dsdb-schema: make schema_subclasses_order_recurse() static
dsdb-schema: make sure use clean caches in schema_inferiors.c
dsdb-schema: make sure we build [system]PossibleInferiors completely
dsdb-acl: introduce a 'msg' helper variable to acl_modify()
dsdb-acl: introduce a 'el' helper variable to acl_modify()
dsdb-acl: dsdb_attribute_by_lDAPDisplayName() is needed for all attributes
dsdb-acl: attr is not optional to acl_check_access_on_attribute()
dsdb-acl: add acl_check_access_on_objectclass() helper
dsdb-acl: use acl_check_access_on_objectclass() instead of acl_check_access_on_class()
dsdb-acl: remove unused acl_check_access_on_class()
dsdb-acl: make use of acl_check_access_on_attribute() in acl_modify()
dsdb-acl: make use of acl_check_access_on_{attribute,objectclass} in acl_rename()
dsdb-acl: make use of acl_check_access_on_objectclass() for the object in acl_delete()
dsdb-acl: the SEC_ADS_DELETE_CHILD checks need objectclass->schemaIDGUID
libcli/security: fix whitespaces in access_check.c
libcli/security: fix formating in access_check.c
libcli/security: simplify get_ace_object_type()
libcli/security: avoid usage of dom_sid_parse_talloc() in sec_access_check_ds()
libcli/security: add init_mask to existing children in insert_in_object_tree
libcli/security: calculate INHERIT_ONLY correcty for AUDIT and ALARM aces (bug #9481)
tests/sec_descriptor: the default owner behavior depends on domainControllerFunctionality (bug #9481)
dsdb-descriptor: get_default_group() should always return the DAG sid (bug #9481)
dbckecker: fix nTSecurityDescriptor values from before 4.0.0rc6 (bug #9481)
samba_upgradeprovision: don't reset 'whenCreated' when resetting 'nTSecurityDescriptor'
samba_upgradeprovision: fix resetting of 'nTSecurityDescriptor' on schema objects
provision: setup names.dns{forest,domain}dn
provision: import/export get_dns_partition_descriptor()
provision: add optional name_map={} argument to get_*_descriptor()
schema.py: add optional name_map={} to get_schema_descriptor()
provision: add get_{config,domain}_delete_protected*_descriptor()
provision: add get_config_ntds_quotas_descriptor()
provision: add get_dns_{forest,domain}_microsoft_dns_descriptor()
provision: introduce names.name_map = {}
provision: setup names.name_map['DnsAdmins']
provision: fix nTSecurityDescriptor of CN={LostAndFound,System},${DOMAINDN} (bug #9481)
provision: fix nTSecurityDescriptor attributes of CN=*,${CONFIGDN} (bug #9481)
provision: fix nTSecurityDescriptor of containers in the DnsZones (bug #9481)
samba_upgradeprovision: fix the nTSecurityDescriptor on more containers (bug #9481)
provision: setup names.dns_backend
samba_upgradeprovision: detect dns_backend for the reference provision
selftest: rename 'promoted_vampire_dc' to 'promoted_dc'
s4:service_task: prevent a segfault if task->msg_ctx is not initialized yet
s4:service_task: add missing imessaging_cleanup() to task_server_terminate()
ldb: fix a warning by converting from TDB_DATA to struct ldb_val
s3: use generate_random_password() instead of generate_random_str()
dsdb/password_hash: make sure that io->n.cleartext_utf8.data is a null terminated string
dsdb/password_hash: rename variable 'stat' to 'vstat'
dsdb/util: rework samdb_check_password() to support utf8
lib/util: improve check_password_quality() to handle utf8
s4:scripting/python: add support for utf-8 passwords from the command line
samba-tool/user setpassword: fix help message
samba-tool/domain provision: add support for utf-8 passwords for --adminpass
Stephen Gallagher (1):
ldb: Move doxygen comments for ldb_connect to the right place
Volker Lendecke (9):
smbd: Fix bug 9549 -- Memleak in the async echo handler
Fix bug 9548: Correctly detect O_DIRECT
smbd: Always compile vfs_commit
smbd: Fix bug 9544, part 1
smbd: Fix bug 9544, part 2
configure: Fix bug 9546, aio_suspend detection on FreeBSD
samr: Split up an assignment from an if condition
samr: Fix bug 9541, make use of posix_openpt
tdb: Fix a typo
-----------------------------------------------------------------------
--
Samba Shared Repository
More information about the samba-cvs
mailing list