The annotated tag, talloc-2.1.4 has been created at 048b3aa2c411627536767ec99fc9404f5c07c97c (tag) tagging 7b6d1a2a5d5561e641d9001901b9e43a64117681 (commit) replaces samba-4.3.0rc1 tagged by Stefan Metzmacher on Tue Oct 13 14:25:04 2015 +0200
- Log ----------------------------------------------------------------- talloc: tag release talloc-2.1.4 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAABAgAGBQJWHPggAAoJEEeTkWETCEAlBUoIAIW1jaZ7y2expkwmNzrZvZnu DVHXRQAd37vm7VJsntOdz9v+4tsqGN3XPejn2MMxoOBUMq552oOcRyD7XJP5TiNY 7oBBDWwjfpKaPT33lZZEGgyLTOLAbL1OE81AT8VM+69u0oGZ49vwh9T5jztb5xlv tIsoUfsycemzZWUOWIIusg6HbLwNUg3tADQZcRRJhHZ7Yrbac7xalhEGrX2/Nv4g twPk9Tk45jxGkN7Pz5GtnrerEEZ+HuHwmdw44/OjUi6hNyzVSmHXbH5+vF5/xNpH YJMlA8iupcufJO1VBRM9olECgzrJNrMpr7LdQk+m5vfidtumzG5JyJxGO+J07z0= =kFDJ -----END PGP SIGNATURE----- Adrian Cochrane (5): install_with_python: Secure Python download with sha256 checks. talloc: Test magic protection measures. talloc: Provide tests access to talloc_magic talloc: Increment minor version due to added talloc_test_get_magic. talloc: Test that talloc magic differs between processes. Amitay Isaacs (82): ctdb-tool: Correctly print timed out event scripts output ctdb-daemon: Correctly process the exit code from failed eventscripts ctdb-client: Return the correct status sent from the daemon ctdb-banning: If node is already banned, do not run ctdb_local_node_got_banned() ctdb-system: Remove unused system specific calls ctdb-daemon: Reset database statistics when resetting statistics ctdb-pmda: Add missing prototype declaration for non-static function ctdb-freeze: Do an early exit if freeze is pending ctdb-freeze: Remove commented test code ctdb-locking: Remove unused priority argument from db_handler_t ctdb-locking: Rename ctdb_db_iterator to ctdb_db_prio_iterator ctdb-locking: Expose ctdb_db_prio_iterator function ctdb-locking: Add ctdb_db_iterator to iterate through all databases ctdb-freeze: Use ctdb_db_prio_iterator to cancel transaction on databases ctdb-freeze: Use ctdb_db_iterator to cancel transaction on databases ctdb-freeze: Use ctdb_db_iterator to start transaction on databases ctdb-freeze: Use ctdb_db_iterator to commit transaction on databases ctdb-call: Convert pending calls list to per database list ctdb-freeze: Refactor code to check if databases are frozen ctdb-daemon: Avoid the use of ctdb->freeze_mode variable ctdb-daemon: Avoid the use of ctdb->freeze_handle variable ctdb-daemon: Add controls to freeze/thaw a single database ctdb-freeze: Move destructor closer to where it is used ctdb-freeze: Use single database freeze/thaw code for existing controls ctdb-locking: Add mark/unmark functions for a single database ctdb-daemon: Use database specific freeze check routine ctdb-daemon: Use database specific mark/unmark routines ctdb-freeze: Improve log message to indicate subsequent freeze operation ctdb-freeze: simplify code with TALLOC_FREE ctdb-daemon: Rename ctdb_control_wipe_database to ctdb_control_transdb ctdb-daemon: Add controls for transactions on a single database ctdb-freeze: Use single database transactions for global transactions ctdb-freeze: Use database specific information in wipe database ctdb-freeze: Fix a log message ctdb-banning: Do not freeze databases on ban in the daemon ctdb-freeze: Make function ctdb_start_freeze static ctdb-freeze: Ensure all databases get frozen during freeze ctdb-freeze: Use individual database freeze in blocking freeze ctdb-daemon: Introduce per database generation ctdb-daemon: Use database generation in packet headers for database requests ctdb-call: Delete old defer queue if recovery occurs ctdb-daemon: Check packet generation against database generation ctdb-daemon: Add a check for database generation consistency ctdb-daemon: Remove freeze requirement for updating vnnmap ctdb-build: Do not mark ctdb private headers public ctdb-build: Do not split ctdb-system subsystem ctdb-daemon: Remove ctdb from traverse_callback ctdb-daemon: formatting fix ctdb-daemon: whitespace fix ctdb-common: Add db_hash abstraction ctdb-common: Add srvid abstraction ctdb-daemon: Replace ctdb_message with srvid abstraction ctdb-daemon: formatting fix ctdb-daemon: whitespace fix ctdb-include: Remove unused definition ctdb-common: Add request id abstraction ctdb-daemon: Use reqid abstraction ctdb-packaging: Install header files in ctdb subdirectory ctdb-build: Set PKGCONFIGDIR for public libraries in standalone build lib/util: Create a new library for tevent_unix.c ctdb-build: Placeholder for public headers from lib/util ctdb-packaging: Package public library and header for tevent-unix-util ctdb-common: Add packet read abstraction ctdb-common: Add packet write abstraction ctdb-common: Add communication endpoint abstraction ctdb-common: Add logging utilities ctdb-include: Remove unused structure definitions ctdb-protocol: Add ctdb protocol serialization routines ctdb-client: Add new client API implementation ctdb-protocol: Add controls for parallel DB recovery ctdb-client: Add client API for new database controls ctdb-recoverd: Add parallel database recovery helper ctdb-recovery: Factor out existing database recovery code ctdb-recoverd: Update capabilities before the database recovery ctdb-recoverd: Update flags on all nodes before database recovery ctdb-daemon: Use a define for default capabilities ctdb-daemon: Add parallel database recovery capability ctdb-recoverd: Add code for parallel database recovery ctdb-call: Improve a log message ctdb-recoverd: Do not freeze databases for election ctdb-recoverd: Get rid of connected-ness comparison in election ctdb-recoverd: Always check for recmaster before doing recovery Andreas Schneider (24): s4-kdc: Use smb_krb5_principal_get_(type|realm) in db-glue s3-auth: Add MIT return code for KDC not reachable krb5-wrap: Use the principal returned by the KDC to create the ccache hdb-samba: Translate SDB errors to HDB errors sdb: Assert if the HDB flags will change waf: Add talloc as a dependency waf: Check for Linux has 32-bit credential calls s3-auth: Fix 'map to guest = Bad Uid' support s3-auth: Pass nt_username to check_account() s3-auth: Fix a memory leak in make_server_info_info3() uwrap: Fix build if getres(uid|gid) are not available. uwrap: Removed double newline uwrap: Bump version to 1.1.1 rwrap: Fix strict aliasing warnings for symbol binding rwrap: Bump version to 1.1.3 swrap: Correctly update the msg_name in recvmsg() swrap: Fix TCP support with sendmsg/recvmsg swrap: Add environment variable to specify mtu size swrap: Fix signed comparsion warnings swrap: Call dlclose() in the destructor swrap: Bump version to 1.1.4 pam_winbind: Fix a segfault if initialization fails replace: Fix check for gettimeofday() Makefile: Add option to list all tests Andrew Bartlett (31): gensec: Add an option emulating another mode a client building GSSAPI/krb5 manually uses heimdal/gssapi: Allow a NULL authenticator selftest: Add test for GSSAPI with no authenticator checksum mode python:samba/upgrade.py Fix format string syntax in error condition Revert "dsdb: Only parse SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL as a DN" Revert "ldb-samba: Implement transitive extended matching" dnsserver: Remove incorrect and not required include of ldb_private.h python: Use an unsigned integer for buf_size, not -1 pidl: Change PIDL to correctly use and validate python integer types python/tests: Add tests for integer overflow handling pydsdb: Allow the full range of uint32_t values for attributeID pidl: Assert that python arrays will not overflow the C array dbcheck: Add explict tests for unknown and unsorted attributeID values dbcheck: Add additional tests for the attributeID list dbcheck: Try to avoid duplicate searches dbcheck: Use set() operations to make dbcheck more efficient Update release-4-1-0rc3 to include data using schema modifications selftest: Add in steps to re-create this database selftest: Add assertion that we actually fix the replPropertyMetaData sort order lib/tls: Remove unused tls_init_client code lib/tls: Ensure SSLv3 is disabled in the web server by default web_server: Use talloc_get_type_abort() web_server: Fix server not to segfault on startup pidl/python: Calculate maximum integer values using a lookup table pidl/python: Provide static inline helper function ndr_PyLong_FromUnsignedLongLong python/tests: Add tests for 64 bit signed integers python/tests: Add more assertions that we get back the value we expect Find the correct symbol when res_* is a define to __res_* build: Move __attribute__ ((destructor)) and ((constructor)) tests to wafsamba lib/talloc: Disrupt buffer overflow attacks on Samba by using random magic lib/talloc: Provide multiple-loading detection for libtalloc via rand() Anoop C S (6): lib/talloc: Fix CID 1291640 Missing unlock lib/talloc: Fix CID 1291639 Missing unlock source3/rpc_client: Fix CID 1273041 Condition is redundant winbindd: Fix CID 1273310 Remove structurally dead code libsmb: Fix CID 1034605 Incorrect pointer comparison libsmb: Fix CID 1034606 Incorrect pointer comparison Anubhav Rakshit (1): s4:torture:smb2:rename: Fix typo in simple_nodelete testcase. Arvid Requate (1): s4:rpc_server/netlogon: Fix for NetApp Aurelien Aptel (1): doc: mention that `smbd -i` exits after first connection Björn Baumbach (3): s3:wscript: fix indentation configure: add --with-gpfs option for selecting directory with gpfs headers build: fix build with gpfs support - add missing dependency to samba-debug Björn Jacke (5): doc: fix description of tls dh params file parameter tls: increase Diffie-Hellman group size to 2048 bits nss_wins: add module for FreeBSD nss_winbind: fix hang on Solaris on big groups build: use as-needed linker flag also on OpenBSD Brad Hards (1): lib/param: move function typedef to after forward declaration of struct loadparm_context Christof Schmitt (8): secrets: Add function to fetch only password change timestamp net: Print time of last password change in 'net ads info' smbd: Log smb2 requests returning !OK with higher log level docs: Fix references to async smb echo handler in smb.conf manpage lib: Fix prctl detection for prctl_set_comment s3: Move call to prctl_set_comment to reinit_after_fork smbd: Set process name for async echo handler smbd: Set process name for notifyd process Douglas Bagnall (2): source3 torture: don't segfault if filename query fails lib/util/debug.h uses va_list, needs stdarg.h Garming Sam (1): spoolss: handle SetPrinter for info level 4 Gustavo Zacarias (1): build: improve stack protector check Günther Deschner (58): s4-torture: don't build the lsa forest trust krb5 tests when building with MIT Kerberos. vfs: fix build warning in smb traffic analyzer. pidl: merge multiple 'genpad' implementations into one. s4-auth: Call krb5_get_init_creds_opt_set_canonicalize() in MIT case. s4-kdc: PAC_GLUE does not depend on hdb anymore. s4-kdc: Introduce sdb a KDC backend abstraction s4-kdc: Introduce a simple sdb_hdb shim layer s4-kdc: Use sdb in db-glue and hdb-samba4 dcom: remove trailing whitespace from dcom.idl orpc: remove trailing whitespace from orpc.idl oxidresolver: remove trailing whitespace from oxidresolver.idl remact: remove trailing whitespace from remact.idl s4-torture: remove trailing whitespace from oxidresolve test. s4-torture: remove trailing whitespace from remact test. oxidresolver: fix indent of ResolveOxid2 in IDL. dcom: fix ident in dcom.idl. oxidresolver: fix indent in oxidresolver.idl remact: fix indent of remact.idl s4-torture: fix indent of remact test. rot: remove trailing whitespace from rot.idl rot: fix indent in rot.idl oxidresolver: fix ServerAlive2 IDL and test. s4-torture: use torture_assert macros for RemoteActivation test. remact: fix IDL for RemoteActivation. s4-torture: fix test for RemoteActivation. s4-torture: fix remact test from crashing. lib/torture: add torture_assert_hresult_{equal,ok} macros. remact: use HRESULT in RemoteActivation IDL and tests. remact: use imp_levels enum in RemoteActivation IDL. s4-torture: fix ResolveOxid test, filling in missing ref,out pointers. s4-torture: fix ResolveOxid2 test, filling in missing ref,out pointers. lib/dcom: use HRESULT in dcom_create_object. s4-torture: add more tests for clusapi_OpenResource(). s3-clusapi: add test for GetResourceDependencyExpression. s4-torture: add test for GetResourceNetworkName. clusapi: add PROPERTY_LIST IDL. s4-torture: add test for clusapi_CreateEnumEx(). clusapi: use ClusterEnumType in clusapi_CreateEnumEx. s4-torture: add ndr testsuite for complex clusapi_PROPERTY_LIST structs. clusapi: use winreg_Type in clusapi registry IDL. s4-torture: also test ClusterControl with a large initial buffer size. clusapi: add clusapi_GroupControlCode enum to IDL. s4-torture: add tests for GroupControl. clusapi: add clusapi_NodeControlCode to IDL. s4-torture: add torture test for clusapi_NodeControl. s4-torture: add more ndr tests for property lists. s3-rpcclient: add client for create enum ex. s4-torture: add test for CLUSCTL_NODE_GET_ID in clusapi_NodeControl. s4-torture: add test to verify WITNESS_NOTIFY_CLIENT_MOVE message marshalling. witness: fix IP address endianess in witness_IPaddrInfo IDL. witness: fix length calculation in witness_IPaddrInfoList IDL. clusapi: remove security.idl dependency from IDL. librpc: properly quote uuids so that wireshark dissectors can be built from them. s3-rpcclient: protect against empty witness async notify messages. s4-torture: trying to make clusapi resource online/offline testing a bit more robust s4-scripting: fix wrong indent that caused gen_ntstatus.py to fail. s4-scripting: fix minor indent issue for hresult generation. kerberos: make sure we only use prompter type when available. Har Gagan Sahai (2): Fix memory leak in dns resolution during spnego authentication using kerberos. s3: dfs: Fix a crash when the dfs targets are disabled. Herb Lewis (1): s4: torture: Fix double-free on error. Jeremy Allison (11): lib: replace: Add strsep function (missing on Solaris). tests: Add regression test for s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup. winbind: Don't delete an existing krb5 ticket on cached logon. s3: smbclient: Move cmd_setmode out of clitar.c and back into client.c s3: smbd: Remove unused parameter from build_stream_path(). s3: smbd: Fix opening/creating :stream files on the root share directory. s3: tests: smbclient test to ensure we can create and see a :foobar stream on the top level directory in a share. s3: smbd: Fix mkdir race condition. s4: torture: Test mkdir race condition. s4: torture: Fix directory test against a server that actually uses index returns. s3: smbd: Fix NULL pointer bug introduced by previous 'raw' stream fix (bug #11522). Justin Maggard (1): s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup. Kai Blin (5): dns: Add dns_get_authoritative_zone helper function dns: Just pass the name to create_response_rr dns: Also pass nsrecs to handle_question() dns: Add a SOA record to error replies dns: always add authority records Martin Schwenke (42): tdb: Fix broken build with --disable-python ctdb-daemon: Check if updates are in flight when releasing all IPs ctdb-scripts: Improve error handling for 50.samba testparm failure ctdb-tests: Make fake gateway different to actual public IPs ctdb-tests: Add a policy routing test with misconfiguration ctdb-scripts: Rename 40.fs_use to 05.system ctdb-scripts: Move filesystem monitoring into a function, clean it up ctdb-scripts: Don't fail monitoring if sanity checks fail ctdb-scripts: New configuration variable CTDB_MONITOR_FILESYSTEM_USAGE ctdb-tests: Add tests for filesystem usage monitoring ctdb-tests: Remove unwanted trailing whitespace ctdb-scripts: Move system memory checking to 05.system ctdb-scripts: Only use /proc/meminfo for memory checks, not "free" ctdb-scripts: Use MemAvailable if it is in /proc/meminfo ctdb-scripts: Memory monitoring uses thresholds expressed as percentages ctdb-scripts: Factor out new function check_thresholds() ctdb-scripts: New consistent system memory and swap monitoring ctdb-scripts: Don't shutdown CTDB when memory monitoring fails ctdb-scripts: Throttle system resource monitoring warnings ctdb-scripts: Enable system monitoring eventscript by default ctdb-scripts: Add default system memory usage warnings ctdb-scripts: Add default filesystem usage warnings ctdb-daemon: Drop struct ctdb_control_killtcp ctdb-tools: Add dbstatistics to ctdb_diagnostics ctdb-scripts: New internal variable CTDB_NFS_CALLOUT_STATE_DIR ctdb-scripts: Drop 62.cnfs eventscript ctdb-scripts: Drop functions ctdb_checkstatus() and ctdb_setstatus() ctdb-scripts: Drop file removal involving $ctdb_managed_dir ctdb-scripts: Drop internal file-level variables referencing $CTDB_VARDIR ctdb-docs: Update "ctdb reloadnodes" documentation ctdb-build: Add missing manual pages to pre-generate list for tarball ctdb-scripts: Properly set CTDB_VARDIR in scripts at install time ctdb-scripts: New internal variable CTDB_SCRIPT_VARDIR ctdb-scripts: Move remaining state files into CTDB_SCRIPT_VARDIR ctdb-scripts: Factor out possible creation of rt_tables file ctdb-scripts: CTDB_BASE must be set when including functions file ctdb-scripts: Rename variable CTDB_ETCDIR to CTDB_SYS_ETCDIR ctdb-tools: Drop vacuum.log from ctdb_diagnostics ctdb-scripts: Update important installed files to use build-time defaults ctdb-doc: Update out-of-date documentation for CTDB socket options ctdb-build: Install pre-built manpages when xsltproc not available ctdb-doc: Fix a typo in the definition of CTDB_NODE_ADDRESS Mathieu Parent (1): ctdb-build: Use socket_wrapper only with selftest Matthieu Patou (1): ldb: create a cache of known wellknown objects instead of continously searching in the db Michael Adam (99): smbXsrv: add a smbXsrv_connection argument to smb2srv_session_lookup_raw smbXsrv: rename smb2srv_session_lookup -> smb2srv_session_lookup_conn smbXsrv: add smb2srv_session_lookup_client(). smbXsrv: use smb2srv_session_lookup_client in smbXsrv_session_close_loop s3:smb2_sesssetup: check that the connection belongs to the session in sess.setup s3:smb2_server: defer channel/session validation to the session setup code. s3:smb2_sesssetup: remove now unneeded declaration of smb2srv_session_lookup_raw smbXsrv_session:idl: add smbXsrv_session_auth0 s3:sesssetup: use session->pending_auth in smb1 session setup smbXsrv_session:idl: remove the preauth and gensec members param: make set_variable() static. param: accompany FN_LOCAL_PARM_CHAR with FN_LOCAL_CHAR s3:lib: remove unused dummyparam.c docs:smbdotconf: make formatting of headers uniform. docs:smbdotconf: fix type of "preferred master" parameter. docs:smbdotconf: fix context of 'include' in doc tests: teach the docs test about boolean-rev docs:smbdotconf: fix type to bool-rev for reverse synonyms. docs:smbdotconf: add param flag 'synonym' to the DTD docs:smbdotconf: add param flags 'handler' and 'deprecated' to the DTD docs:smbdotconf: add handler info to smbdotconf docs where missing docs:smbdotconf: add param flag 'enumlist' to the DTD docs:smbdotconf: add enumlist property to parameters where missing param: rename szLdapGroupSuffix -> _ldap_group_suffix param: turn ldap group suffix into a generated function param: rename szLdapUserSuffix -> _ldap_user_suffix param: turn ldap user suffix into a generated function param: rename szLdapIdmapSuffix -> _ldap_sz_idmap_suffix param: turn ldap idmap suffix into a generated function param: rename szLdapMachineSuffix -> _ldap_machine_suffix param: turn ldap idmap suffix into a generated function param: rename variable of 'max print jobs' to default. param: generate lp[cfg]_max_print_jobs() param: use lp[cfg]_max_print_jobs() in lp[cfg]_maxprintjobs() param: rename iPreferredMaster -> _preferred_master param: turn 'preferred master' into a generated function param: rename iminreceivefile -> min_receivefile_size param: turn 'min receivefile size' into a generated function param: rename szPrintcapName -> printcap_name param: turn 'printcap name' into a generated function param: treat negative values of 'smb2 max credits' as default. param: turn 'smb2 max credits' into generated option param: rename bWidelinks -> wide_links param: turn 'wide links' into a generated funcion param: rename winbindMaxDomainConnections -> _winbind_max_domain_connections param: make 'winbind max domain connections' a generated function. param: rename CupsEncrypt -> cups_encrypt param: turn 'cups encrypt' into a generated function param: make 'realm' use the standard 'realm' variable. param: rename bAvailable -> available param: rename szCopy -> copy param: rename szInclude -> include param: rename szIdmapBackend -> idmap_backend param: rename szIdmapUID -> idmap_uid param: rename szIdmapGID -> idmap_gid docs:smbdotconf: add 'function' parameter to valid docs:smbdotconf: add 'function' parameter to enablespoolss docs:smbdotconf: add 'function' argument to writeable generate_param: make it possible to handle generated and synonym flags in iteration generate_param: generate struct entries if we don't generate access functions. param: move dnsdomain from generate_param to EXTRA_GLOBALS param: add SYNONYM flag where missing param: make 'timestamp logs' the default writing of 'debug timestamp' param: don't list '-valid' and 'copy' as synonyms - they aren't docs:smbdotconf: 'write ok' is a synonym of 'writeable' not of 'read only' docs:smbdotconf: make preload a synonym of 'auto services' docs:smbdotconf: add deprecated flags where missing. generate_param: more uniform formatting of various type dicts generate_param: teach missing types cmdlist, bytes, octal, ustring. tests:docs: teach the test the types cmdlist, bytes, octal, and ustring docs:smbdotconf: change type to cmdlist where needed. docs:smbdotconf: change type to bytes where needed docs:smbdotconf: change type to octal where needed docs:smbdotconf: change type to ustring where needed. param: move the actual table out into param_table_static.c generate_param: add a means to generate param_table_gen.c from the docs build: generate param_table_gen.c from docs in the build tests:docs: common initialization in docs test. tests:docs: print more complicated structures than strings in the message. tests:docs: add a function to load the full data structures from the table tests:docs: load the full data from the existing param_table. tests:docs: load the full data from the generated param_table tests:docs: test the diff between the static and generated table param: use the generated parameter table. tests:docs: remove testing the diff between the static and generated table tests:docs: don't load or test the static param_table. param: remove the static param_table. param: update the README with instructions for adding a parameter ctdb-doc: remove description of removed --syslog option from ctdbd manpage ctdb: improve a misleading help text. ctdb-server: fix a possible fd leak in ctdb_tcp_listen_automatic() build: fix quotation of deps for 'param' subsystem. build: line-break deps for 'param' subsystem net: add option --no-dns-updates for net ads join docs: mention new --no-dns-updates parameter in manpage of net. net: reformat usage text for 'net ads join' s3:smb2_sesssetup: change talloc hierarchy in smbd_smb2_session_setup_gensec_done s3:smb2_sesssetup: let smbd_smb2_auth_generic_return() cope with channels s3:lib:interface: break an overly long line Petr Viktorin (1): python: Remove uuid module Ralph Boehme (21): s3-net: use talloc array in share allowedusers vfs_streams_xattr: stream names may contain colons vfs_catia: run translation on stream names s4:torture:vfs_fruit: pass xattr name as arg to torture_setup_local_xattr() s4:torture:vfs_fruit: add a test for stream names notify: check for valid notify_ctx in notify_remove selftest: add change notify = no to simpleserver env selftest: add a check for disabled change notify vfs_fruit: handling of empty resource fork vfs_fruit: split and simplify fruit_ftruncate vfs_fruit: delete ._ file when deleting the basefile s4:torture:vfs_fruit: add a resource fork truncation test s4:torture:vfs_fruit: created empty resourceforks Revert "tdb: Add tdbdump -u" s4:torture: add a test for 0 byte sized streams samba-tool: add command to dump dosinfo xattr from a file s3: smbd: fix a crash in unix_convert() vfs_fruit: return value of ad_pack in vfs_fruit.c s3:smbd: add expected_seq_low arg to smbd_initialize_smb2 s3:smb3: rename smbd_smb2_first_negprot and pass expected seq_low s3:smbd: pass expected_seq_low to smbd_initialize_smb2 Ralph Wuerthner (1): s3: add suport for SMB3_10 and SMB3_11 protocols in smbstatus Richard Sharpe (4): Prevent a crash in Python modules that try to authenticate by ensuring we reject cases where credendials fields are not intialized. Move the error handling for svhdx to vfswrap_create to give VFS module writers a chance to handle RSVD opens if they want to. Change the libreadline word-break character set to only space, TAB and NL so that we can attempt to do tab completion across backslashes. Fix a few small spelling mistakes in DEBUG messages to reduce confusion Robin Hack (1): vfs_scannedonly: Remove vfs_scannedonly from samba source tree. Roel van Meer (1): s3-util: Compare the maximum allowed length of a NetBIOS name Stefan Metzmacher (51): VERSION: Bump version up to 4.4.0pre1 WHATSNEW: Clear release notes for Samba 4.4.0pre1. smbXsrv: add a smbXsrv_connection argument to smbXsrv_session_local_lookup() smbXsrv_session: add smbXsrv_session_find_auth() smbXsrv_session: add smbXsrv_session_create_auth() s3:smb2_sesssetup: use session->pending_auth wafsamba: don't add -DSTATIC_%s_MODULES* arguments for SAMBA_LIBRARY(pyembed=True) script/release.sh: This is a new script to do releases script/librelease.sh: this is replaced by script/release.sh now s3:lib: fix some corner cases of open_socket_out_cleanup() libcli/smb: prefer AES128_CCM s3:smb2_negprot: prefer AES128_CCM if the client supports it release-scripts/build-manpages-nogit: run make realdistclean at the end s4:torture/rpc: fix ndr_security.h include in fsrvp.c s3:wscript: fix the build without any idmap module s3:idmap: we need to allow undefined symbols in idmap_tdb s3:wscript: remove leftover from vfs_notify_fam s4:ntvfs/posix: fix forward declaration of struct pvfs_state examples/pdb: fix and validate pdb_test_init() prototype via static_decl_pdb; examples/VFS: make function prototypes available via static_decl_vfs; s3:modules/vfs_*: make function prototypes available via static_decl_vfs; s3:modules/perfcount_*: make function prototypes available via static_decl_perfcount; s3:winbindd/idmap_*: make function prototypes available via static_decl_idmap; s3:wscript: simplify ABI matching for pdb_*_init() s3:wscript: make --with-{static,shared}-modules options more flexible script/autobuild.py: split out a samba_libs_configure variable script/autobuild.py: use -Wmissing-prototypes and --picky-developer for samba-libs* script/autobuild.py: test some --with-{static,shared}-modules combinations script/autobuild.py: make sure --nonshared-binary=smbtorture,smbd/smbd keeps working s3:vfs_smb_traffic_analyzer: remove samba_ prefix from AES_* function calls lib/crypto: add aes_cmac_128 chunked tests lib/crypto: run all aes_gcm_128 testcases lib/crypto: verify 0 updates in aes_gcm_128 tests lib/crypto: add aes_ccm_128 tests lib/crypto: add optimized helper functions aes_block_{xor,lshift,rshift}() lib/crypto: optimize aes_cmac_128 lib/crypto: optimize aes_ccm_128 lib/crypto: optimize aes_gcm_128 lib/crypto: make use of aes_test.h in aes_gcm_128_test.c lib/crypto: sync AES_cfb8_encrypt() from heimdal lib/crypto: make it possible to use only parts of aes.[ch] s3:smb2_create: #if 0 unused variable ldb:wscript: make it possible to build samba with a system ldb again pidl/python: also add a ndr_PyLong_FromLongLong() for symnetric reasons s3:smb2_sesssetup: let smbd_smb2_reauth_generic_return() cope with channels smbXsrv_session: factor smbXsrv_session_add_channel() out of smbXsrv_session_create() s3:lib/messages: add missing allocation check for priv_path s3:lib/messages: use 'msg.lock' and 'msg.sock' for messaging related subdirs s4:lib/messaging: use 'msg.lock' and 'msg.sock' for messaging related subdirs lib/param: fix hiding of FLAG_SYNONYM values s3:ctdbd_conn: make sure we destroy tevent_fd before closing the socket Thomas Nagy (6): third_party:waf: Backport parts of the waf 1.8 API third_party:waf: fix a mis-merge - Utils.check_dir issue build:wafsamba: Close file handles in the build scripts too build:wafsamba: Use the Waf 1.8 API get_tgen_by_name instead of name_to_obj build:wafsamba: Use the samba-provided CHECK_CFG method in configuration tests build:wafsamba: Set the default installation prefix for Waf 1.8 Timur Bakeyev (1): configure: Fix aio_suspend detection Tom Schulz (2): s4: tests: Fix nss_tests build on Solaris. s4: fix linking smbtorture on Solaris. Uri Simchoni (2): net: fix a crash with net ads keytab create vfs_commit: set the fd on open before calling SMB_VFS_FSTAT Volker Lendecke (140): vfs: Fix CID 1312073 Argument cannot be negative vfs: Fix CID 1312072 Failure to restore non-local value tdb_wrap: Use talloc_pooled_object tdb_wrap: Use a struct initializer dns_server: Add NULL check dns_server: Fix CNAME handling dns_server: Don't call tevent_req_finish twice dns_server: Fix a small memleak nfs4acls: Use ZERO_STRUCTP nfs4acls: Use an anon struct for SMB4ACL_T nfs4acls: Use an anon struct for SMB4ACE_T nfs4acls: Remove an obsolete comment nfs4acls: Use SMB4ACL_T instead of _SMB_ACL4_INT_T nfs4acls: Use SMB4ACE_T instead of _SMB_ACE4_INT_T nfs4acls: Remove the SMB_ACL4_INT_T typedef nfs4acls: Remove the SMB_ACE4_INT_T typedef nfs4acls: Remove get_validated_aclint nfs4acls: Remove get_validated_aceint nfs4acls: Use talloc_zero() nfs4acls: Use talloc_zero() nfs4acls: Use talloc_zero_array() nfs4acls: Use talloc_realloc() nfs4acls: Remove a few unnecessary casts nfs4acls: Introduce a helper variable nfs4acls: Fix a small memleak nfs4acls: Remove type_name param from smbacl4_get_vfs_params smbd: Remove a confusing comment smbd: Use a struct initializer lib: Remove some unused code lib: Remove some unused code libcli: Use iov_buflen in smb2_signing.c ctdb: Fix the build on FreeBSD 10.1 ctdb: Fix some clang uninitialized errors replace: Fix bug 11455 gensec: Fix CID 242642 Unchecked return value lib: Add the pointer itself to talloc_report_str ctdb: Use talloc_report_str in ctdb lib: Use dom_sid_equal where appropriate vfs: Add some {} smbd: Remove an unnecessary else branch lib: Remove unused parmlist code param: Simplify set_param_opt() param: Use talloc_pooled_object loadparm3: Add lp_wi_scan_global_parametrics() idmap: Move idmap_init() under the static vars idmap: Initialize all idmap domains at startup idmap: Use a range search in idmap_backends_unixid_to_sid idmap: Remove "domname" from idmap_backends_unixid_to_sid idmap: Remove "domname" from idmap_uid_to_sid idmap: Remove "domname" from idmap_gid_to_sid idmap: Remove dom_name from wbint_Uid2Sid idmap: Remove dom_name from wbint_Gid2Sid winbind: Do not look for the domain in wb_uid2sid winbind: Do not look for the domain in wb_gid2sid winbind: Remove "have_idmap_config" from winbindd_domain lib: Make sid_parse take a uint8_t lib: Convert callers of sid_blob_parse to sid_parse lib: Remove unused sid_blob_parse lib: Make sid_linearize take a uint8_t winbind: Fix 100% loop Revert "winbind: Fix 100% loop" samr4: Use <SID=%s> in GetGroupsForUser ctdb: Fix a 32-bit problem vfs_gpfs: Introduce vfs_gpfs_fsp_is_offline vfs_gpfs: Avoid calling gpfs_is_offline on every i/o libsmbclient: Fix 32-bit problems samdb: Fix CID 1034736 Dereference after null check dsdb: Fix a confusing parameter fruit: Fix CID 1323186 Dereference before null check ctdb: Fix CID 1324447 Double close tdb: Add tdbdump -u dbwrap: Remove loadparm_context from db_open_tdb dbwrap: Remove unused dbwrap_hash_size() dbwrap: Remove talloc_reference() dbwrap: Make dbwrap_db_id return size_t dbwrap: Simplify dbwrap_record_watchers_key() dbwrap: Convert dbwrap_record_watchers_key to not use talloc dbwrap: Remove talloc from dbwrap_watch_record_stored() messages_dgm: No includes.h necessary messages_dgm: Fix an incorrect cast ldb: Fix CID 1034781 Unsigned compared against 0 net: Fix some tiny memleaks net: Add "serverid exists" messages_dgm: Add messaging_dgm_get_unique lib: Use serverid_exists in server_id_db_check_exclusive lib: Use messaging_dgm_get_unique in serverid_exists lib: Remove serverids_exist lib: Remove ctdb_serverids_exist lib: Add server_id_str_buf_unique lib: Fix server_id_from_string lib: Add "pid/unique" format for server_id_from_string lib: Fix server_id_db_set_exclusive libreplace: Fix the build on Solaris lib: Fix the build on Solaris lib: We only need the fd-passing check once lib: Move some routines around in msghdr.c lib: Support fd passing using the 4.3BSD way lib: We can do ACCRIGHTS style fdpassing winbind: Fix 100% loop lib: Lift lp_ctdbd_socket() call up one level lib: Store ctdb_timeout in ctdb_connection lib: Remove temporary ctdb_connection in ctdb_control lib: Store sockname in ctdbd_connection lib: Pass parameters to ctdbd_init_connection() lib: Move lp_ctdbd_socket() to cluster_support.c lib: Pass sockname and timeout to ctdbd_messaging_connection lib: Pass sockname and timeout to ctdbd_probe() lib: Fix CID 1325733 Uninitialized scalar variable lib: Fix CID 1128553 Unchecked return value from library lib: Fix error talloc leaks in ctdb_read_packet() lib: Add ctdbd_control_unix lib: Use ctdbd_control_unix in register_with_ctdbd lib: Use ctdbd_control_unix in get_cluster_vnn lib: Rename a variable lib: Use ctdbd_control_unix in ctdbd_working lib: Use ctdbd_control_unix in ctdbd_dbpath lib: Use ctdbd_control_unix in ctdbd_db_attach lib: Use ctdbd_control_unix in ctdbd_db_attach lib: Use ctdbd_control_unix in ctdbd_register_ips lib: Remove ctdbd_control lib: Rename ctdbd_control_unix to ctdbd_control lib: Make register_with_ctdbd return 0/errno lib: Make get_cluster_vnn return 0/errno lib: Make ctdbd_register_msg_ctx return 0/errno lib: Make ctdbd_init_connection return 0/errno lib: Make ctdbd_messaging_connection return 0/errno lib: Make ctdbd_messaging_send_iov return 0/errno lib: Make ctdbd_db_attach return 0/errno lib: Make ctdbd_migrate return 0/errno lib: Make ctdbd_parse return 0/errno lib: Make ctdbd_traverse return 0/errno lib: Make ctdbd_register_ips return 0/errno lib: Make ctdbd_control_local return 0/errno lib: Make ctdb_watch_us return 0/errno lib: Make ctdb_unwatch return 0/errno lib: Make ctdbd_probe return 0/errno lib: Remove messaging_tevent_context() dependency from ctdbd_conn.c lib: Use poll_intr_one_fd in ctdb_read_packet lib: Make messaging_ctdbd_init return 0/errno lib: Make messaging_send_iov_from return 0/errno ----------------------------------------------------------------------- -- Samba Shared Repository