[SCM] Samba Shared Repository - annotated tag samba-4.0.3 created

Karolin Seeger kseeger at samba.org
Tue Feb 5 06:15:10 MST 2013

The annotated tag, samba-4.0.3 has been created
        at  a79f022977fb046c39d626b50c96b83cabb0e601 (tag)
   tagging  11319b5f1d0c48cefea695f89aa64f72abe1dd3e (commit)
  replaces  samba-4.0.2
 tagged by  Karolin Seeger
        on  Tue Feb 5 13:28:25 2013 +0100

- Log -----------------------------------------------------------------
samba: tag release samba-4.0.3
Version: GnuPG v2.0.18 (GNU/Linux)


Andreas Schneider (2):
      s3-rpc_server: Fix a possible null pointer dereference.
      BUG 9574: Fix a possible null pointer dereference in spoolss.

Andrew Bartlett (37):
      selftest: show that Samba honours "write list" and valid users
      vfs: Fix compilation of solaris ACL module
      dsdb-acl: give error string if we can not obtain the schema
      dsdb-acl: Add helper function dsdb_get_structural_oc_from_msg()
      dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_modify()
      dsdb-acl: Use dsdb_get_structural_oc_from_msg() in acl_rename()
      dsdb-acl: use dsdb_get_structural_oc_from_msg() rather than class_schemaid_guid_by_lDAPDisplayName
      dsdb-acl: ask for the objectClass attribute if it's not in the scope of the clients search
      dsdb-acl: Remove unused get_oc_guid_from_message()
      dsdb-acl: Pass the structural objectClass into acl_check_access_on_attribute
      dsdb-acl: Use the structural objectClass in acl_check_access_on_attribute()
      libcli/security: handle node initialisation in one spot in insert_in_object_tree()
      libcli/security: remove useless if (root->num_of_children > 0) statements
      dsdb: Ensure "authenticated users" is processed for group memberships
      dsdb: Explain ordering constraints on the ACL module as well.
      drs-fsmo: Improve handling of FSMO role takeover.
      dsdb: Do not hold the transaction over the IRPC call to perform a role transfer
      torture: Fix fsmo test to use correct -H samba-tool syntax
      selftest: Add test of upgradeprovision using the old alpha13 tree
      gensec: Allow login without a PAC by default (bug #9581)
      build: Remove bashism from SAMBAMANPAGES rule
      passdb: Add discard_const_p() to pdb_samba_dsdb
      swat: move russian swat files alongside ja and tr
      build: Make install_with_python.sh executable
      build: In install_with_python.sh force using the python from the install we just made
      build: Make install_with_python.sh more portable
      heimdal_build: Try again to sort out the strerror_r mess
      dsdb: Make linked_attributes module GUID based for renames
      dsdb: Make secrets_tdb_sync cope with -H secrets.ldb
      bug9598: s4-process_single: Use pid,fd as cluster_id in process_single just like process_prefork
      pymessaging: Use correct unsigned types for server ID tuple elememnts
      pymessaging: Pass around the server_id struct to python callbacks rather than the tuple
      s4-process_single: Use pid,task_id as cluster_id in process_single just like process_prefork
      ldb: Change ltdb_unpack_data to take an ldb_context
      ldb: Remove no-longer-existing ltdb_unpack_data_free from ldb_tdb.h (cherry picked from commit 4b2f3c6dec997b0dd4bcafeae662a71ebd34e12b)
      ldb: Add ldbdump, based on tdbdump
      ldb: Ensure to decrement the transaction_active whenever we delete a transaction

Andrew Tridgell (2):
      ldb: move ldb_pack.c into common
      ldb: fixed callers for ldb_pack_data() and ldb_unpack_data()

Arvid Requate (1):
      s4-resolve: Fix parsing of IPv6/AAAA in dns_lookup (bug #9555)

Björn Baumbach (7):
      samba_dnsupdate: set KRB5_CONFIG for nsupdate command (bug #9517)
      smb.conf(5): update list of available protocols (bug #9552)
      ntlm_auth(1): fix format and make examples visible (bug #9569)
      wafsamba: use additional xml catalog file (bug #9512)
      docs-xml: add dbwrap_tool.1 manual page (fix bug #9568 [1/2])
      build(waf): docs-xml: build new dbwrap_tool.8 manual page (fix bug #9568 [2/2])
      build(waf)-libreplace: remove redundant check for flistea function

David Disseldorp (2):
      printing: Remove invalid free from error path.
      BUG 9378: Add extra attributes for AD printer publishing.

Günther Deschner (3):
      spoolss: add SPOOLSS_DRIVER_VERSION_2012 (4) define to IDL.
      BUG 9474: Downgrade v4 printer driver requests to v3.
      s3-winbind: fix the build of idmap_ldap.

Ira Cooper (2):
      nsswitch: Fix two bitfield constants being the same.
      s3: Fix vfs_zfsacl to compile.

Jelmer Vernooij (1):
      wafsamba: python-config is not always a script.

Jeremy Allison (32):
      Fix bug #9196 - defer_open is triggered multiple times on the same request.
      Start to tidy-up check_user_ok().
      Move the definition of struct vuid_cache_entry *ent outside blocks.
      Remove one set of enclosing {} braces, no longer needed.
      Remove the second set of {} braces, no longer needed. (cherry picked from commit ed0a34d163f777b2a0d4a2b358b7fb1b170d7686)
      Remove dead code now vuser can no longer be NULL.
      Remove unneeded variable "const struct auth_session_info *session_info"
      Remove static from create_share_access_mask().
      Fix API for create_share_access_mask().
      Change API for create_share_access_mask() to pass in the token.
      Change API for create_share_access_mask() - remove conn struct.
      Add parallel cache for share_access entries, one per connection struct.
      Correctly setup the conn->share_access based on the current user token.
      Add check_user_share_access()
      Initialize stack variables. Prelude to factoring out calls to check_user_share_access().
      Factor code out of check_user_ok() into a call to check_user_share_access().
      Fix bug #9518 - conn->share_access appears not be be reset between users.
      Move create_share_access_mask() from smbd/service.c to smbd/uid.c
      Fixup the change_to_user_by_session() case as called from become_user_by_session()
      Add missing check for sys/wait.h
      Add ucontext configure waf checks.
      Add ucontext configure autoconf checks.
      Include sys/ucontext.h if available.
      Fix bug 9550 - sigprocmask does not work on FreeBSD to stop further signals in a signal handler
      Sort winbind request flags. Ira saw we have a duplicate.
      Revert "s3:smbd: SMB ReadX with size > 0xffff should only possible for samba clients."
      Fix bug #9572 - File corruption during SMB1 read by Mac OSX 10.8.2 clients.
      Fix bug #9586 - smbd[29175]: disk_free: sys_popen() failed" message logged in /var/log/message many times.
      Fix bug #9587 - archive flag is always set on directories.
      Regression test for bug #9587 - archive flag is always set on directories.
      Fix bug #9588 - ACLs are not inherited to directories for DFS shares.
      Regression test for bug #9571 - Unlink after open causes smbd to panic

Jesper Larsen (1):
      replace: Fix compilation of rep_mkstemp

Karolin Seeger (14):
      VERSION: Bump version number up to 4.0.1.
      docs: ldb.3.xml: Correct meta data.
      docs: ldbadd.1.xml: Correct meta data.
      docs: ldbdel.1.xml: Correct meta data.
      docs: ldbedit.1.xml: Correct meta data.
      docs: ldbmodify.1.xml: Correct meta data.
      docs: ldbrename.1.xml: Correct meta data.
      docs: ldbsearch.1.xml: Correct meta data.
      Merge commit 'samba-4.0.2' into v4-0-test
      VERSION: Bump version number up to 4.0.3.
      WHATSNEW: Start release notes for Samba 4.0.3.
      WHATSNEW: Update release notes.
      WHATSNEW: Update release notes.
      VERSION: Disable git snapshots for the 4.0.3 release.

Matthieu Patou (9):
      dsdb-acl: Do not apply ACL on special DNs to hide attributes that the user shouldn't see
      dsdb: Fix warning about unused var
      libcli-security: Add documentation for object_tree_modify_access
      security: Add documentation
      drsuapi: Add documentation
      libcli-acl: add documentation
      dbcheck: look in hasMasterNCs as well for determining the instance type of a NC
      Tests: avoid adding python options that are functions in the env
      Tests: Fix the display of test vars in screen --testenv

Michael Adam (7):
      docs: add an entity stdarg.option for the "--option" command line parameter
      docs: use the stdarg.option entity in the popt.common.samba entity
      docs: fix the stdarg.configfile entity to print a "=" sign after the long option
      docs: add popt.common.samba.server and popt.common.samba.client entities
      docs: document the command line options in dbwrap_tool(1)
      build(waf): fix the abi_match for the pdb library
      ldb: fix a typo in the comment for ldb_req_is_untrusted()

Pavel Shilovsky (1):
      Fix bug #9571 - Unlink after open causes smbd to panic.

Rusty Russell (3):
      tdb: add tdb_rescue()
      tdb: tdbdump should log errors, and fail in that case.
      tdb: add -e option to tdbdump (and docment it).

Samba-JP oota (2):
      docs: Remove superfluous bracket.
      docs: Fix typo in vfs_tsmsm.8.xml.

Stefan Metzmacher (80):
      s4:lib/messaging: terminate the irpc_servers_byname() result with server_id_set_disconnected() (bug #9540)
      s4:scripting/python: always treat the highwatermark as opaque (bug #9508)
      s4:dsdb/repl_meta_data: always treat the highwatermark as opaque (bug #9508)
      s4:dsdb/repl_meta_data: store the last results and timestamps in the repsFrom
      s4:dsdb/repl_meta_data: also update the last_sync_success in replUpToDateVector
      s4:dsdb/repl_meta_data: don't merge highwatermark and uptodatevector (bug #9508)
      s4:dsdb/common: use LDB_SEQ_HIGHEST_SEQ for our entry in the uptodatevector
      s4:dsdb/common: use 01.01.1970 as last_sync_success for our entry in the uptodatevector
      s4:dsdb/drepl: update the source_dsa_obj/invocation_id in repsFrom
      s4:drsuapi: move struct drsuapi_getncchanges_state to the top of getncchanges.c
      s4:drsuapi: remove unused 'highest_usn' from drsuapi_getncchanges_state
      s4:drsuapi: avoid a ldb_dn_copy() and use talloc_move() instead
      s4:drsuapi: always use the current uptodateness_vector
      s4:drsuapi: add drsuapi_DsReplicaHighWaterMark_cmp()
      s4:drsuapi: make sure we never return the same highwatermark twice in a replication cycle (bug #9508)
      s4:drsuapi: check the source_dsa_invocation_id (bug #9508)
      s4:drsuapi: make sure we report the meta data from the cycle start (bug #9508)
      s4:drsuapi: make use of LDB_TYPESAFE_QSORT() and pass getnc_state
      s4:drsuapi: try to behave more like windows for usn order (bug #9508)
      s3:smb2_negprot: set the 'remote_proto' value (bug #9499)
      Merge tag 'samba-4.0.1' into v4-0-test
      VERSION: Bump version number up to 4.0.2.
      dsdb-acl: don't call dsdb_user_password_support() if we don't use the result
      dsdb-acl: talloc_free the private context when we pass to the next module
      dsdb-acl: fix the order of special and system checks
      libcli/security: don't look at the inherited type in get_ace_object_type()
      dsdb-acl: add helper variable 'ldb' in acl_sDRightsEffective
      dsdb-acl: calculate sDRightsEffective based on "nTSecurityDescriptor"
      dsdb-schema: make schema_subclasses_order_recurse() static
      dsdb-schema: make sure use clean caches in schema_inferiors.c
      dsdb-schema: make sure we build [system]PossibleInferiors completely
      dsdb-acl: introduce a 'msg' helper variable to acl_modify()
      dsdb-acl: introduce a 'el' helper variable to acl_modify()
      dsdb-acl: dsdb_attribute_by_lDAPDisplayName() is needed for all attributes
      dsdb-acl: attr is not optional to acl_check_access_on_attribute()
      dsdb-acl: add acl_check_access_on_objectclass() helper
      dsdb-acl: use acl_check_access_on_objectclass() instead of acl_check_access_on_class()
      dsdb-acl: remove unused acl_check_access_on_class()
      dsdb-acl: make use of acl_check_access_on_attribute() in acl_modify()
      dsdb-acl: make use of acl_check_access_on_{attribute,objectclass} in acl_rename()
      dsdb-acl: make use of acl_check_access_on_objectclass() for the object in acl_delete()
      dsdb-acl: the SEC_ADS_DELETE_CHILD checks need objectclass->schemaIDGUID
      libcli/security: fix whitespaces in access_check.c
      libcli/security: fix formating in access_check.c
      libcli/security: simplify get_ace_object_type()
      libcli/security: avoid usage of dom_sid_parse_talloc() in sec_access_check_ds()
      libcli/security: add init_mask to existing children in insert_in_object_tree
      libcli/security: calculate INHERIT_ONLY correcty for AUDIT and ALARM aces (bug #9481)
      tests/sec_descriptor: the default owner behavior depends on domainControllerFunctionality (bug #9481)
      dsdb-descriptor: get_default_group() should always return the DAG sid (bug #9481)
      dbckecker: fix nTSecurityDescriptor values from before 4.0.0rc6 (bug #9481)
      samba_upgradeprovision: don't reset 'whenCreated' when resetting 'nTSecurityDescriptor'
      samba_upgradeprovision: fix resetting of 'nTSecurityDescriptor' on schema objects
      provision: setup names.dns{forest,domain}dn
      provision: import/export get_dns_partition_descriptor()
      provision: add optional name_map={} argument to get_*_descriptor()
      schema.py: add optional name_map={} to get_schema_descriptor()
      provision: add get_{config,domain}_delete_protected*_descriptor()
      provision: add get_config_ntds_quotas_descriptor()
      provision: add get_dns_{forest,domain}_microsoft_dns_descriptor()
      provision: introduce names.name_map = {}
      provision: setup names.name_map['DnsAdmins']
      provision: fix nTSecurityDescriptor of CN={LostAndFound,System},${DOMAINDN} (bug #9481)
      provision: fix nTSecurityDescriptor attributes of CN=*,${CONFIGDN} (bug #9481)
      provision: fix nTSecurityDescriptor of containers in the DnsZones (bug #9481)
      samba_upgradeprovision: fix the nTSecurityDescriptor on more containers (bug #9481)
      provision: setup names.dns_backend
      samba_upgradeprovision: detect dns_backend for the reference provision
      selftest: rename 'promoted_vampire_dc' to 'promoted_dc'
      s4:service_task: prevent a segfault if task->msg_ctx is not initialized yet
      s4:service_task: add missing imessaging_cleanup() to task_server_terminate()
      ldb: fix a warning by converting from TDB_DATA to struct ldb_val
      s3: use generate_random_password() instead of generate_random_str()
      dsdb/password_hash: make sure that io->n.cleartext_utf8.data is a null terminated string
      dsdb/password_hash: rename variable 'stat' to 'vstat'
      dsdb/util: rework samdb_check_password() to support utf8
      lib/util: improve check_password_quality() to handle utf8
      s4:scripting/python: add support for utf-8 passwords from the command line
      samba-tool/user setpassword: fix help message
      samba-tool/domain provision: add support for utf-8 passwords for --adminpass

Stephen Gallagher (1):
      ldb: Move doxygen comments for ldb_connect to the right place

Volker Lendecke (9):
      smbd: Fix bug 9549 -- Memleak in the async echo handler
      Fix bug 9548: Correctly detect O_DIRECT
      smbd: Always compile vfs_commit
      smbd: Fix bug 9544, part 1
      smbd: Fix bug 9544, part 2
      configure: Fix bug 9546, aio_suspend detection on FreeBSD
      samr: Split up an assignment from an if condition
      samr: Fix bug 9541, make use of posix_openpt
      tdb: Fix a typo


Samba Shared Repository

More information about the samba-cvs mailing list