[SCM] Samba Shared Repository - branch v4-0-test updated

2012-12-11 Thread Karolin Seeger
The branch, v4-0-test has been updated
   via  3ecca2d WHATSNEW: Update changes since rc6.
   via  cfe4b43 s4:provision: set the correct nTSecurityDescriptor on 
CN=Domain Controllers,... (bug #9481)
   via  78814f7 s4:provision: set the correct nTSecurityDescriptor on 
CN=Users,... (bug #9481)
   via  8e2c71f s4:provision: set the correct nTSecurityDescriptor on 
CN=Computers,... (bug #9481)
   via  e037bac s4:provision: set the correct nTSecurityDescriptor on 
CN=Builtin,... (bug #9481)
   via  7e50d96 s4:provision: set the correct nTSecurityDescriptor on 
CN=Infrastructure,... (bug #9481)
   via  58a2a5e s4:provision: set the correct nTSecurityDescriptor on 
CN=Sites,CN=Configuration... (bug #9481)
   via  1e3f0e4 s4:provision: set the correct nTSecurityDescriptor on 
CN=Partitions,CN=Configuration... (bug #9481)
   via  2cb4450 s4:dsdb/descriptor: pass object_list to 
create_security_descriptor()
   via  566aae7 libcli/security: calculate the correct inherited_object GUID
   via  3cda521 libcli/security: implement object_in_list()
   via  bde0414 WHATSNEW: Update release notes for Samba 4.0.0.
   via  1afacd4 s3:auth: fix create_token_from_sid() to not fail in the 
winbindd case
   via  c14d1da s3:auth: fix function header comment for 
user_sid_in_group_sid()
   via  8ee8ebb s3:auth: fix header comment for user_sid_in_group_sid()
   via  b9241d6 s4:dsdb/tests/sec_descriptor: verify the search of a 
windows dc join keeps working
   via  73c2db7 s4:dsdb/tests/sec_descriptor: verify the 
nTSecurityDescriptor and sd_flags interaction
   via  c6cb652 s4:dsdb/operational: fix stripping of the 
nTSecurityDescriptor attribute
   via  ac3dd3c s4:dsdb/acl_read: return the nTSecurityDescriptor attr if 
the sd_flags control is given (bug #9470)
   via  b73f780 s4:dsdb/acl_read: give some variables a better name
   via  111ecf1 s4:dsdb/acl_read: fix the calculation of the attribute 
array for the sub search
   via  3407dd4 s4:dsdb/acl_read: check the ldb_attr_list_copy_add() result
   via  5321239 s4:dsdb/dirsync: fix potential talloc hierachy problems 
(bug #9470)
   via  45e53f0 s4:dsdb/descriptor: fix replication of NC heads
   via  d0237f6 s4:dsdb/acl_read: improve debugging for fatal error
   via  630bde0 s4:dsdb/acl_read: keep the ldb_message of the sub search 
(bug #9470)
   via  0da785a s4:dsdb/schema_data.c: correctly move the CN=Aggregate 
attributes to msg-elements[i].values (bug #9470)
   via  1762d14 s4:dsdb/schema: fix dsdb_schema_set_el_from_ldb_msg() (bug 
#9470)
  from  9eab38b WHATSNEW: Update changes since rc6.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 3ecca2ddb7ee57c3a7416bf04d22ba7f5bcf6540
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 09:05:47 2012 +0100

WHATSNEW: Update changes since rc6.

Karolin

Autobuild-User(v4-0-test): Karolin Seeger ksee...@samba.org
Autobuild-Date(v4-0-test): Tue Dec 11 10:49:36 CET 2012 on sn-devel-104

commit cfe4b43b13ad9d9a25c2072f6ccf55066cea19f7
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Dec 11 03:15:26 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Domain 
Controllers,... (bug #9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org

Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Dec 11 07:05:39 CET 2012 on sn-devel-104
(cherry picked from commit 914a61d9e5b7a182592f3afe60f4dad1cd342fc4)

commit 78814f79e2af7ee5a155dc006f7fa61b8c061f11
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Dec 11 03:15:26 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Users,... (bug 
#9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
(cherry picked from commit 8eb359c23c6379be1ccc32e27fd2316d77a7c7b3)

commit 8e2c71f2003feeebc3291599afa5e2882a40c90f
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Dec 10 11:32:07 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Computers,... (bug 
#9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
(cherry picked from commit 19b03834f08c2a6645a31fe18121534c692c18d1)

commit e037bac1f7c7bfdaddfb97a16c200e57ba087bc9
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Dec 10 11:32:07 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Builtin,... (bug 
#9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
(cherry picked from commit e1301fef735b305736db0b6db335c37aa9fea832)

commit 7e50d9655461e28b67e4fc0eb5dcf026f9c17d2e
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Dec 10 11:32:07 2012 

autobuild: intermittent test failure detected

2012-12-11 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1133/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1133/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1133/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1133/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1133/samba.stdout
  
The top commit at the time of the failure was:

commit 914a61d9e5b7a182592f3afe60f4dad1cd342fc4
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Dec 11 03:15:26 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Domain 
Controllers,... (bug #9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org

Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Dec 11 07:05:39 CET 2012 on sn-devel-104


autobuild: intermittent test failure detected

2012-12-11 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1730/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1730/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1730/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1730/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1730/samba.stdout
  
The top commit at the time of the failure was:

commit 914a61d9e5b7a182592f3afe60f4dad1cd342fc4
Author: Stefan Metzmacher me...@samba.org
Date:   Tue Dec 11 03:15:26 2012 +0100

s4:provision: set the correct nTSecurityDescriptor on CN=Domain 
Controllers,... (bug #9481)

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org

Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Dec 11 07:05:39 CET 2012 on sn-devel-104


[SCM] Samba Shared Repository - branch master updated

2012-12-11 Thread Michael Adam
The branch, master has been updated
   via  9ee3343 selftest: skip the samba4.rpc.samr.passwords test in 
ncacn_np(dc) and s4member environments
   via  498f98f s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()
   via  1a4adcf s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from 
ChangePasswordUser
   via  ce89560 s4:rpc_server/samr: do WRONG_PASSWORD checks after the 
complexity checks
   via  da066ec s4:dsdb/password_hash: do the min password age checks first
   via  7c6b10f s4:dsdb/common: only pass the 
DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if required
   via  18a306e s4:torture:rpc:samr: add debugging of result of (many) 
dcerpc_samr_* calls
   via  48ac584 s4:dsdb/password_hash: Honor password complexity settings.
   via  a5e6b05 Revert s4:dsdb/password_hash: Honor password complexity 
settings.
  from  914a61d s4:provision: set the correct nTSecurityDescriptor on 
CN=Domain Controllers,... (bug #9481)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 9ee3343529d2897e900b8824e49b253cfc53bff9
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 16:13:39 2012 +0100

selftest: skip the samba4.rpc.samr.passwords test in ncacn_np(dc) and 
s4member environments

These currently fail in a corner case.

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-by: Karolin Seeger ksee...@samba.org

Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Dec 11 17:56:01 CET 2012 on sn-devel-104

commit 498f98f126de6da5aff7f054a85270f315c7a400
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:34:49 2012 +0100

s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()

The min_password_age field is the negative of the age.

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 1a4adcfcb31a06fe3eae4e78a502cbfaa092587e
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:21:11 2012 +0100

s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from ChangePasswordUser

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit ce895609b04380bfc41e4f8fddc84bd2f9324340
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:18:00 2012 +0100

s4:rpc_server/samr: do WRONG_PASSWORD checks after the complexity checks

This matches the windows behavior.

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit da066ec1d7b1284461ad907a35a94f30819ecbdc
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:04:22 2012 +0100

s4:dsdb/password_hash: do the min password age checks first

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 7c6b10fbb05eaa6075f01a4b4f8fb60f42d2dfa7
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Dec 10 23:56:47 2012 +0100

s4:dsdb/common: only pass the DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if 
required

This should give the password_hash module a chance to detect if the called
was the cleartext password or not.

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org

commit 18a306e2f2d90f6d0c7b5d82272a69d72510ed7c
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 11:42:11 2012 +0100

s4:torture:rpc:samr: add debugging of result of (many) dcerpc_samr_* calls

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 48ac5842dd9f13619d652af1dfe1b04dc79ada7d
Author: Stefan Metzmacher me...@samba.org
Date:   Fri Nov 23 11:49:05 2012 +0100

s4:dsdb/password_hash: Honor password complexity settings.

Honor password complexity settings when creating new users.
Without this patch, you could set simple passwords although the complexity
settings were enabled. This was an issue with 'samba-tool user add' and also
when adding new users via Windows' Active Directory Users and Computers
MMC Snap-In.

The following scenarios were tested successfully after applying the patch:
-'samba-tool user add' against s4
-'samba-tool user add -H' against a Windows DC
-Adding a new user on a s4 DC using Windows' Active Directory Users and
 Computers MMC Snap-In.

Please note that this bug was caused by a mistake in the documentation.

Fix bug #9414 - 'samba-tool user add' ignores password 

[SCM] Samba Shared Repository - branch v4-0-test updated

2012-12-11 Thread Karolin Seeger
The branch, v4-0-test has been updated
   via  9b4bd43 VERSION: Bump version number up to 4.0.1.
   via  df33344 VERSION: Bump version number up to 4.0.0.
   via  a69e731 WHATSNEW: Update changes since rc6.
   via  0eb0a5e selftest: skip the samba4.rpc.samr.passwords test in 
ncacn_np(dc) and s4member environments
   via  55cf387 s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()
   via  9fcd01c s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from 
ChangePasswordUser
   via  89e11bb s4:rpc_server/samr: do WRONG_PASSWORD checks after the 
complexity checks
   via  59a6739 s4:dsdb/password_hash: do the min password age checks first
   via  8fc0b57 s4:dsdb/common: only pass the 
DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if required
   via  ee4f3ff s4:torture:rpc:samr: add debugging of result of (many) 
dcerpc_samr_* calls
   via  22fcbd5 s4:dsdb/password_hash: Honor password complexity settings.
   via  a86ee3d WHATSNEW: Fix typo.
   via  1819e94 WHATSNEW: Add link to the whitepaper.
   via  3c131a8 WHATSNEW: Move AD stuff to the corresponding paragraph.
   via  f553377 WHATSNEW: Update release notes.
   via  5b202f0 WHATSNEW: Update release notes.
  from  3ecca2d WHATSNEW: Update changes since rc6.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit 9b4bd4322febc429e4daf286000bd9a51cbc34ec
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 18:07:32 2012 +0100

VERSION: Bump version number up to 4.0.1.

And re-enable git snapshots.

Karolin

commit df33344d8eb40221d60c99931690703a11d91bc2
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 18:01:14 2012 +0100

VERSION: Bump version number up to 4.0.0.

And disable git snapshots.

Karolin

commit a69e7314a4ac42910eeed0b30a478d699d27a97a
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 17:56:18 2012 +0100

WHATSNEW: Update changes since rc6.

Karolin

commit 0eb0a5e93cbb62c1039f7f24c19bdb542edca718
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 16:13:39 2012 +0100

selftest: skip the samba4.rpc.samr.passwords test in ncacn_np(dc) and 
s4member environments

These currently fail in a corner case.

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-by: Karolin Seeger ksee...@samba.org

The last 9 patches address bug #9414 - 'samba-tool user add' ignores 
password
complexity settings.

commit 55cf3873b45d626e4abaa8e95cf48b1889d25efe
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:34:49 2012 +0100

s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()

The min_password_age field is the negative of the age.

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 9fcd01c08d6e2df82867b93bd3c3f6b86358f016
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:21:11 2012 +0100

s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from ChangePasswordUser

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 89e11bb08c5d4fe12d7a0955500c6d9803698a1b
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:18:00 2012 +0100

s4:rpc_server/samr: do WRONG_PASSWORD checks after the complexity checks

This matches the windows behavior.

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 59a67391bf297c7db8966beee88c298235faaa7f
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 13:04:22 2012 +0100

s4:dsdb/password_hash: do the min password age checks first

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher me...@samba.org

commit 8fc0b5774966590d1175bbe2bc2bcd8384105661
Author: Stefan Metzmacher me...@samba.org
Date:   Mon Dec 10 23:56:47 2012 +0100

s4:dsdb/common: only pass the DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if 
required

This should give the password_hash module a chance to detect if the called
was the cleartext password or not.

Signed-off-by: Stefan Metzmacher me...@samba.org
Reviewed-by: Michael Adam ob...@samba.org

commit ee4f3ff81309b53411e6d6282e130d69d7cb9c38
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 11:42:11 2012 +0100

s4:torture:rpc:samr: add debugging of result of (many) dcerpc_samr_* calls

Pair-Programmed-With: Stefan Metzmacher me...@samba.org

Signed-off-by: Michael Adam ob...@samba.org
Signed-off-by: Stefan Metzmacher 

[SCM] Samba Shared Repository - branch v4-0-stable updated

2012-12-11 Thread Karolin Seeger
The branch, v4-0-stable has been updated
   via  df33344 VERSION: Bump version number up to 4.0.0.
   via  a69e731 WHATSNEW: Update changes since rc6.
   via  0eb0a5e selftest: skip the samba4.rpc.samr.passwords test in 
ncacn_np(dc) and s4member environments
   via  55cf387 s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()
   via  9fcd01c s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from 
ChangePasswordUser
   via  89e11bb s4:rpc_server/samr: do WRONG_PASSWORD checks after the 
complexity checks
   via  59a6739 s4:dsdb/password_hash: do the min password age checks first
   via  8fc0b57 s4:dsdb/common: only pass the 
DSDB_CONTROL_PASSWORD_HASH_VALUES_OID if required
   via  ee4f3ff s4:torture:rpc:samr: add debugging of result of (many) 
dcerpc_samr_* calls
   via  22fcbd5 s4:dsdb/password_hash: Honor password complexity settings.
   via  a86ee3d WHATSNEW: Fix typo.
   via  1819e94 WHATSNEW: Add link to the whitepaper.
   via  3c131a8 WHATSNEW: Move AD stuff to the corresponding paragraph.
   via  f553377 WHATSNEW: Update release notes.
   via  5b202f0 WHATSNEW: Update release notes.
   via  3ecca2d WHATSNEW: Update changes since rc6.
   via  cfe4b43 s4:provision: set the correct nTSecurityDescriptor on 
CN=Domain Controllers,... (bug #9481)
   via  78814f7 s4:provision: set the correct nTSecurityDescriptor on 
CN=Users,... (bug #9481)
   via  8e2c71f s4:provision: set the correct nTSecurityDescriptor on 
CN=Computers,... (bug #9481)
   via  e037bac s4:provision: set the correct nTSecurityDescriptor on 
CN=Builtin,... (bug #9481)
   via  7e50d96 s4:provision: set the correct nTSecurityDescriptor on 
CN=Infrastructure,... (bug #9481)
   via  58a2a5e s4:provision: set the correct nTSecurityDescriptor on 
CN=Sites,CN=Configuration... (bug #9481)
   via  1e3f0e4 s4:provision: set the correct nTSecurityDescriptor on 
CN=Partitions,CN=Configuration... (bug #9481)
   via  2cb4450 s4:dsdb/descriptor: pass object_list to 
create_security_descriptor()
   via  566aae7 libcli/security: calculate the correct inherited_object GUID
   via  3cda521 libcli/security: implement object_in_list()
   via  bde0414 WHATSNEW: Update release notes for Samba 4.0.0.
   via  1afacd4 s3:auth: fix create_token_from_sid() to not fail in the 
winbindd case
   via  c14d1da s3:auth: fix function header comment for 
user_sid_in_group_sid()
   via  8ee8ebb s3:auth: fix header comment for user_sid_in_group_sid()
   via  b9241d6 s4:dsdb/tests/sec_descriptor: verify the search of a 
windows dc join keeps working
   via  73c2db7 s4:dsdb/tests/sec_descriptor: verify the 
nTSecurityDescriptor and sd_flags interaction
   via  c6cb652 s4:dsdb/operational: fix stripping of the 
nTSecurityDescriptor attribute
   via  ac3dd3c s4:dsdb/acl_read: return the nTSecurityDescriptor attr if 
the sd_flags control is given (bug #9470)
   via  b73f780 s4:dsdb/acl_read: give some variables a better name
   via  111ecf1 s4:dsdb/acl_read: fix the calculation of the attribute 
array for the sub search
   via  3407dd4 s4:dsdb/acl_read: check the ldb_attr_list_copy_add() result
   via  5321239 s4:dsdb/dirsync: fix potential talloc hierachy problems 
(bug #9470)
   via  45e53f0 s4:dsdb/descriptor: fix replication of NC heads
   via  d0237f6 s4:dsdb/acl_read: improve debugging for fatal error
   via  630bde0 s4:dsdb/acl_read: keep the ldb_message of the sub search 
(bug #9470)
   via  0da785a s4:dsdb/schema_data.c: correctly move the CN=Aggregate 
attributes to msg-elements[i].values (bug #9470)
   via  1762d14 s4:dsdb/schema: fix dsdb_schema_set_el_from_ldb_msg() (bug 
#9470)
   via  9eab38b WHATSNEW: Update changes since rc6.
   via  ad987df s4-torture: call the s4u2self tests with arcfour and aes.
   via  e057dea s4-torture: precalculate expected session keys from 
samlogon in schannel test.
   via  f84b881 libcli/auth: support AES decryption in 
netlogon_creds_decrypt_samlogon().
   via  db81ad1 libcli/auth: remove trailing whitespace.
   via  9de38fc s3-auth: remove crypto from serverinfo_to_SamInfoX calls.
   via  751b152 s3-rpc_server: Remove obsolete process_creds boolean in 
samlogon server.
   via  32f8265 s3-auth: session keys in validation level 6 samlogon 
replies are *not* encrypted.
   via  012937c s3-rpc_server: support AES for interactive netlogon 
samlogon password decryption.
   via  1dbf3ac s4-rpc_server: support AES encryption in interactive and 
generic samlogon.
   via  119b15c s3-rpc_server: we need to encrypt OWFs using DES in 
_netr_ServerGetTrustInfo().
   via  0996946 s4-torture: validate owf password hash and negotiate AES in 
forest trust test.
   via  9a9d2f2 s4-torture: validate owf password hash and negotiate AES 
ServerGetTrustInfo test.
   via  a63d67b s3-rpc_server: pass down 

[SCM] Samba Shared Repository - annotated tag samba-4.0.0 created

2012-12-11 Thread Karolin Seeger
The annotated tag, samba-4.0.0 has been created
at  4f5cfc9cc2631559f7e76a658c8984910b4d509f (tag)
   tagging  df33344d8eb40221d60c99931690703a11d91bc2 (commit)
  replaces  samba-4.0.0rc6
 tagged by  Karolin Seeger
on  Tue Dec 11 18:20:58 2012 +0100

- Log -
samba: tag release samba-4.0.0
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.18 (GNU/Linux)

iD8DBQBQx2uDbzORW2Vot+oRAuLoAJwOGceb1KQ8GBXaS5dO1X8M9RQ3YACeK0x2
1imQvyxyBdxu3VO29cso1YQ=
=ri14
-END PGP SIGNATURE-

Alexander Bokovoy (1):
  wafsamba: Make sure md5 is really work before using it or overriding the 
hash function

Andreas Schneider (1):
  BUG 9459: Install manpages only if we install the target.

Andrew Bartlett (1):
  build: Install .po files for SWAT intl support

Arvid Requate (1):
  s3:smbd: Fix typo in got_duplicate_group check

Günther Deschner (28):
  libcli/auth: add netlogon_creds_aes_{en|de}crypt routines.
  s3-rpc_client: use netlogon_creds_arcfour_crypt() in 
init_netr_CryptPassword.
  s3-rpc_client: support AES encryption in netr_ServerPasswordSet2 client.
  s3-rpc_server: support AES decryption in netr_ServerPasswordSet2 server.
  s4-torture: remove trailing whitespace from netlogon test.
  s4-torture: pass down netlogon flags in netr_ServerPasswordSet2 tests.
  s4-torture: add AES support for netr_ServerPasswordSet2 tests.
  s4-rpc_server: support AES decryption in netr_ServerPasswordSet2 server.
  s3-rpc_client: use netlogon_creds_aes_encrypt in interactive netlogon 
samlogon.
  s4-torture: remove trailing whitespace in smbtorture remote_pac test.
  s4-torture: use names for r.in.logon_level of netlogon samlogon requests.
  s4-torture: support AES encryption in pac_verify/generic samlogon 
netlogon tests.
  s4-torture: support AES encryption in interactive samlogon tests in 
rpc.samr.
  s4-torture: exit early when join fails in samba3rpc tests.
  s4-torture: use netlogon_creds_arcfour_crypt() in samba3rpc test.
  s3-rpc_server: pass down netlogon cred state in 
_netr_ServerGetTrustInfo().
  s4-torture: validate owf password hash and negotiate AES 
ServerGetTrustInfo test.
  s4-torture: validate owf password hash and negotiate AES in forest trust 
test.
  s3-rpc_server: we need to encrypt OWFs using DES in 
_netr_ServerGetTrustInfo().
  s4-rpc_server: support AES encryption in interactive and generic samlogon.
  s3-rpc_server: support AES for interactive netlogon samlogon password 
decryption.
  s3-auth: session keys in validation level 6 samlogon replies are *not* 
encrypted.
  s3-rpc_server: Remove obsolete process_creds boolean in samlogon server.
  s3-auth: remove crypto from serverinfo_to_SamInfoX calls.
  libcli/auth: remove trailing whitespace.
  libcli/auth: support AES decryption in netlogon_creds_decrypt_samlogon().
  s4-torture: precalculate expected session keys from samlogon in schannel 
test.
  s4-torture: call the s4u2self tests with arcfour and aes.

Jeremy Allison (3):
  Modify ensure_canon_entry_valid() into ensure_canon_entry_valid_on_set() 
- makes the logic clearer.
  Another fix needed for bug #9236 - ACL masks incorrectly applied when 
setting ACLs.
  Documentation fixes for bug #9462 - Users can not be given write 
permissions any more by default

Karolin Seeger (12):
  VERSION: Bump version number up to rc7.
  WHATSNEW: Add changes since rc6.
  WHATSNEW: Update changes since rc6.
  WHATSNEW: Update release notes for Samba 4.0.0.
  WHATSNEW: Update changes since rc6.
  WHATSNEW: Update release notes.
  WHATSNEW: Update release notes.
  WHATSNEW: Move AD stuff to the corresponding paragraph.
  WHATSNEW: Add link to the whitepaper.
  WHATSNEW: Fix typo.
  WHATSNEW: Update changes since rc6.
  VERSION: Bump version number up to 4.0.0.

Michael Adam (13):
  s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIED
  Revert Another fix needed for bug #9236 - ACL masks incorrectly applied 
when setting ACLs.
  Revert Fix bug 9376 - ensure_canon_entry_valid generates duplicate 
SMB_ACL_GROUP, acl_valid fails.
  s3:smbd: don't apply create/directory mask and modes in 
apply_default_perms()
  s3:auth: fix header comment for user_sid_in_group_sid()
  s3:auth: fix function header comment for user_sid_in_group_sid()
  s3:auth: fix create_token_from_sid() to not fail in the winbindd case
  s4:torture:rpc:samr: add debugging of result of (many) dcerpc_samr_* calls
  s4:dsdb/password_hash: do the min password age checks first
  s4:rpc_server/samr: do WRONG_PASSWORD checks after the complexity checks
  s4:torture/samr: allow STATUS_PASSWORD_RESTRICTIONS from 
ChangePasswordUser
  s4:torture:rpc:samr: fix password age calculation in 
test_ChangePasswordUser3()
  selftest: skip the 

[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Karolin Seeger
The branch, master has been updated
   via  a205824 Announce Samba 4.0.0.
  from  c3a4c6e Announce Samba 3.6.10.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit a2058240ef6d451667e253747a78bc870a135e92
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 15:40:23 2012 +0100

Announce Samba 4.0.0.

Karolin

---

Summary of changes:
 generated_news/latest_10_bodies.html|   22 +-
 generated_news/latest_10_headlines.html |4 +-
 generated_news/latest_2_bodies.html |   20 +-
 history/header_history.html |1 +
 history/samba-4.0.0.html|  764 +++
 latest_stable_release.html  |6 +-
 6 files changed, 791 insertions(+), 26 deletions(-)
 create mode 100755 history/samba-4.0.0.html


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index dd3f192..63c0c12 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,3 +1,13 @@
+   h5a name=4.0.011 December 2012/a/h5
+   p class=headlineSamba 4.0.0 Available for Download/p
+   pThis is the first stable release of the Samba 4.0 series./p
+
+pThe uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
+now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
+the release notes for more info/a./p
+
h5a name=3.6.1010 December 2012/a/h5
p class=headlineSamba 3.6.10 Available for Download/p
pThis is the latest stable release of the Samba 3.6 series./p
@@ -84,15 +94,3 @@ See a 
href=https://download.samba.org/pub/samba/rc/WHATSNEW-4-0-0rc2.txt;the
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-3.5.18.tar.gz;downloaded
 now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.5.17-3.5.18.diffs.gz;patch 
against Samba 3.5.17/a is also available. See a 
href=http://samba.org/samba/history/samba-3.5.18.html;the release notes for 
more info/a./p
-
-   h5a name=3.6.817 September 2012/a/h5
-   p class=headlineSamba 3.6.8 Available for Download/p
-   pThis is the latest stable release of the Samba 3.6 series./p
-
-pThe uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA).  The source code can be
-a href=http://samba.org/samba/ftp/stable/samba-3.6.8.tar.gz;downloaded
-now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.6.7-3.6.8.diffs.gz;
-patch against Samba 3.6.7/a is also available.
-See a href=http://samba.org/samba/history/samba-3.6.8.html;
-the release notes for more info/a./p
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index 1d2b5c9..0a50fd0 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 ul
+   li 11 December 2012 a href=#4.0.0Samba 4.0.0 Available for 
Download/a/li
+
li 10 December 2012 a href=#3.6.10Samba 3.6.10 Available for 
Download/a/li
 
li 04 December 2012 a href=#4.0.0rc6Samba 4.0.0rc6 Available for 
Download/a/li
@@ -16,6 +18,4 @@
li 02 October 2012 a href=#4.0.0rc2Samba 4.0.0rc2 Available for 
Download/a/li
 
li 24 September 2012 a href=#3.5.18Samba 3.5.18 Available for 
Download/a/li
-
-   li 17 September 2012 a href=#3.6.8Samba 3.6.8 Available for 
Download/a/li
 /ul
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index f323cd5..de0ea2e 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,3 +1,14 @@
+   h5a name=4.0.011 December 2012/a/h5
+   p class=headlineSamba 4.0.0 Available for Download/p
+   pThis is the first stable release of the Samba 4.0 series./p
+
+pThe uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
+now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
+the release notes for more info/a./p
+
+
h5a name=3.6.1010 December 2012/a/h5
p class=headlineSamba 3.6.10 Available for Download/p
pThis is the latest stable release of the Samba 3.6 series./p
@@ -9,12 +20,3 @@ now/a. A a 
href=http://samba.org/samba/ftp/patches/patch-3.6.9-3.6.10.diffs.
 patch against Samba 3.6.9/a is also available.
 See a href=http://samba.org/samba/history/samba-3.6.10.html;
 the release notes for more info/a./p
-
-   h5a name=4.0.0rc604 December 2012/a/h5
-   p class=headlineSamba 4.0.0rc6 Available for Download/p
-   pThis is the sixth release candidate of the Samba 4.0 series./p
-
-pThe 

[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Karolin Seeger
The branch, master has been updated
   via  bf293f1 release notes: Update.
  from  a205824 Announce Samba 4.0.0.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit bf293f12ea1c9850da1fe82b4ce4a2b2f747e407
Author: Karolin Seeger ksee...@samba.org
Date:   Tue Dec 11 18:36:33 2012 +0100

release notes: Update.

Karolin

---

Summary of changes:
 history/samba-4.0.0.html |2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/history/samba-4.0.0.html b/history/samba-4.0.0.html
index d16f56c..4b5a85a 100755
--- a/history/samba-4.0.0.html
+++ b/history/samba-4.0.0.html
@@ -245,6 +245,7 @@ CHANGES SINCE 4.0.0rc6
 ==
 
 o   Michael Adam lt;ob...@samba.orggt;
+* BUG 9414: Honor password complexity settings.
 * BUG 9456: developer-build: Fix panic when acl_xattr fails with access
   denied.
 * BUG 9457: Fix map username script with security=ads and Winbind.
@@ -272,6 +273,7 @@ o   Tsukasa Hamano lt;ham...@osstech.co.jpgt;
 
 
 o   Stefan Metzmacher lt;me...@samba.orggt;
+* BUG 9414: Honor password complexity settings.
 * BUG 9470: Fix MMC crashes.
 * BUG 9481: Fix ACL on cn=partitions,cn=configuration.
 


-- 
Samba Website Repository


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  e6e0431 Add 4.0 release announcement
  from  bf293f1 release notes: Update.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit e6e04311f7b778ba3ebf16238fe0f5ba3dac826a
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 19:00:13 2012 +0100

Add 4.0 release announcement

---

Summary of changes:
 news/releases/4.0.0.html |  191 ++
 1 files changed, 191 insertions(+), 0 deletions(-)
 create mode 100644 news/releases/4.0.0.html


Changeset truncated at 500 lines:

diff --git a/news/releases/4.0.0.html b/news/releases/4.0.0.html
new file mode 100644
index 000..3dd77d7
--- /dev/null
+++ b/news/releases/4.0.0.html
@@ -0,0 +1,191 @@
+!--#include virtual=/samba/header.html --
+  titleSamba - opening windows to a wider world/title
+!--#include virtual=/samba/global_menu.html --
+
+h2a name=4.0.0Samba Team Releases Samba 4.0/h2
+
+pDecember 11th 2012./p
+
+pThe Samba Team is proud to announce the release of Samba 4.0, a major
+new release of the award-winning Free Software file, print and
+authentication server suite for Microsoft Windows clients./p
+
+
+h3The First Free Software Active Directory Compatible Server/h3
+
+pAs the culmination of ten years' work, the Samba Team has created the
+first compatible Free Software implementation of Microsoft’s Active
+Directory protocols. Familiar to all network administrators, the
+Active Directory protocols are the heart of modern directory service
+implementations./p
+
+pSamba 4.0 comprises an LDAP directory server, Heimdal Kerberos
+authentication server, a secure Dynamic DNS server, and
+implementations of all necessary remote procedure calls for Active
+Directory. Samba 4.0 provides everything needed to serve as an Active
+Directory Compatible Domain Controller for all versions of Microsoft
+Windows clients currently supported by Microsoft, including the
+recently released Windows 8./p
+
+pThe Samba 4.0 Active Directory Compatible Server provides support for
+features such as Group Policy, Roaming Profiles, Windows
+Administration tools and integrates with Microsoft Exchange and Free
+Software compatible services such as OpenChange./p
+
+pThe Samba 4.0 Active Directory Compatible Server can also be joined to
+an existing Microsoft Active Directory domain, and Microsoft Active
+Directory Domain Controllers can be joined to a Samba 4.0 Active
+Directory Compatible Server, showing true peer-to-peer
+interoperability of the Microsoft and Samba implementations of the
+Active Directory protocols./p
+
+pAcknowledging the value of the interoperability of the Samba 4.0
+Active Directory Compatible Server, Steve van Maanen, the co-founder
+of Starsphere LLC, an IT services company in Tokyo, said:/p
+
+pThanks to Samba4, I have two fully replicating Active Directory
+Domain controllers that boot in under 10 seconds ! It is nice to have
+alternatives, and Samba4 is a great one./p
+
+pUpgrade scripts are also provided for organizations using the previous
+Microsoft Windows NT Domain Controller functionality in Samba 3.x, to
+allow them to migrate smoothly to Samba 4.0./p
+
+pSuitable for low-power and embedded applications, yet scaling to large
+clusters, Samba 4.0 is efficient and flexible. Its Python programming
+interface and administration toolkit help in enterprise deployments./p
+
+
+h3Created Using Microsoft Documentation/h3
+
+pThe Samba 4.0 Active Directory Compatible Server was created with help
+from the official protocol documentation published by Microsoft
+Corporation and the Samba Team would like acknowledge the
+documentation help and interoperability testing by Microsoft engineers
+that made our implementation interoperable./p
+
+pActive Directory is a mainstay of enterprise IT environments, and
+Microsoft is committed to support for interoperability across
+platforms, said Thomas Pfenning, director of development, Windows
+Server. We are pleased that the documentation and interoperability
+labs that Microsoft has provided have been key in the development of
+the Samba 4.0 Active Directory functionality./p
+
+
+h3Introducing SMB2.1 File Serving Support/h3
+
+pSamba 4.0 includes the first Free Software implementation of
+Microsoft's SMB2.1 file serving protocol. Building on the success of
+the SMB2.0 server in Samba 3.6, the Samba 4.0 file server component is
+an evolution of the trusted Samba file serving code that is used
+worldwide by vendors of file servers, such as IBM's clustered Scale
+Out Network Attached Storage (SONAS), and many other commercial
+products./p
+
+pIn addition, the Samba 4.0 file server contains an initial
+implementation of SMB3, which will be further developed in later Samba
+4 releases into a fully-featured SMB3 clustered file server
+implementation./p
+
+pFuture developments 

[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  9b54a67 Add missing footer
  from  e6e0431 Add 4.0 release announcement

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 9b54a678971e66029ff64f28de415b2840a11177
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 19:07:27 2012 +0100

Add missing footer

---

Summary of changes:
 news/releases/4.0.0.html |4 
 1 files changed, 4 insertions(+), 0 deletions(-)


Changeset truncated at 500 lines:

diff --git a/news/releases/4.0.0.html b/news/releases/4.0.0.html
index 3dd77d7..9a3fb4c 100644
--- a/news/releases/4.0.0.html
+++ b/news/releases/4.0.0.html
@@ -189,3 +189,7 @@ running Microsoft Windows. Members of the Samba Team work 
for many of
 the largest companies in the software Industry and even helped
 Microsoft produce the protocol documentation that fully specifies the
 SMB/CIFS protocol./p
+
+div align=centerSamba - iOpening Windows to a Wider World/i/div
+
+!--#include virtual=/samba/footer.html --


-- 
Samba Website Repository


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  81481ee Add links for easier access to background info
  from  9b54a67 Add missing footer

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 81481ee10c8803550354cf832b66044fac8a3491
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 19:22:17 2012 +0100

Add links for easier access to background info

---

Summary of changes:
 news/releases/4.0.0.html |   10 ++
 1 files changed, 6 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/news/releases/4.0.0.html b/news/releases/4.0.0.html
index 9a3fb4c..d2eea51 100644
--- a/news/releases/4.0.0.html
+++ b/news/releases/4.0.0.html
@@ -30,7 +30,8 @@ recently released Windows 8./p
 pThe Samba 4.0 Active Directory Compatible Server provides support for
 features such as Group Policy, Roaming Profiles, Windows
 Administration tools and integrates with Microsoft Exchange and Free
-Software compatible services such as OpenChange./p
+Software compatible services such as a href=http://openchange.org/;
+OpenChange/a./p
 
 pThe Samba 4.0 Active Directory Compatible Server can also be joined to
 an existing Microsoft Active Directory domain, and Microsoft Active
@@ -98,8 +99,8 @@ Windows that Samba users have come to expect from our 
software./p
 pBuilding on our success as the first commercial implementation of a
 clustered SMB/CIFS server, Samba 4.0 provides industry-leading
 scalability and performance as a clustered SMB2/SMB/CIFS file server,
-using our clustered tdb (ctdb) technology - also available as Free
-Software./p
+using our clustered tdb (a href=http://ctdb.samba.org/;ctdb/a)
+technology - also available as Free Software./p
 
 pClustered Samba provides a Single Server view of clustered file
 storage, allowing clients to connect to the least loaded server and
@@ -181,7 +182,8 @@ Corporation./p
 
 h3About the Samba Team/h3
 
-pThe Samba Team is a worldwide group of computer professionals working
+pThe a href=http://www.samba.org/samba/team/;Samba Team/a is
+a worldwide group of computer professionals working
 together via the Internet to produce the highest quality Free Software
 Windows (SMB3/SMB2/SMB/CIFS) server and client software. We are the
 undisputed experts in providing interoperability with computers


-- 
Samba Website Repository


autobuild: intermittent test failure detected

2012-12-11 Thread autobuild
The autobuild test system has detected an intermittent failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1933/flakey.log

The samba3 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1933/samba3.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1933/samba3.stdout

The source4 build logs are available here:

   http://git.samba.org/autobuild.flakey/2012-12-11-1933/samba.stderr
   http://git.samba.org/autobuild.flakey/2012-12-11-1933/samba.stdout
  
The top commit at the time of the failure was:

commit 9ee3343529d2897e900b8824e49b253cfc53bff9
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 16:13:39 2012 +0100

selftest: skip the samba4.rpc.samr.passwords test in ncacn_np(dc) and 
s4member environments

These currently fail in a corner case.

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-by: Karolin Seeger ksee...@samba.org

Autobuild-User(master): Michael Adam ob...@samba.org
Autobuild-Date(master): Tue Dec 11 17:56:01 CET 2012 on sn-devel-104


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  3e28ac8 Add missing spaces
  from  81481ee Add links for easier access to background info

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 3e28ac87b509e6334ab206ca3d3577678f2f30d9
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 19:49:21 2012 +0100

Add missing spaces

---

Summary of changes:
 news/releases/4.0.0.html |4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/news/releases/4.0.0.html b/news/releases/4.0.0.html
index d2eea51..353381b 100644
--- a/news/releases/4.0.0.html
+++ b/news/releases/4.0.0.html
@@ -44,9 +44,9 @@ Active Directory protocols./p
 Active Directory Compatible Server, Steve van Maanen, the co-founder
 of Starsphere LLC, an IT services company in Tokyo, said:/p
 
-pThanks to Samba4, I have two fully replicating Active Directory
+pThanks to Samba 4, I have two fully replicating Active Directory
 Domain controllers that boot in under 10 seconds ! It is nice to have
-alternatives, and Samba4 is a great one./p
+alternatives, and Samba 4 is a great one./p
 
 pUpgrade scripts are also provided for organizations using the previous
 Microsoft Windows NT Domain Controller functionality in Samba 3.x, to


-- 
Samba Website Repository


[SCM] Samba Shared Repository - branch master updated

2012-12-11 Thread Andreas Schneider
The branch, master has been updated
   via  0f75d92 s3:auth: Tidy up some of the API confusion in 
create_token_from_XXX() calls.
   via  a20c474 s3:auth: fix dereference level in talloc checks in  
create_token_from_sid()
  from  9ee3343 selftest: skip the samba4.rpc.samr.passwords test in 
ncacn_np(dc) and s4member environments

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0f75d9274cff7095dfab251307231a5a911f0c8d
Author: Jeremy Allison j...@samba.org
Date:   Mon Dec 10 13:22:10 2012 -0800

s3:auth: Tidy up some of the API confusion in create_token_from_XXX() calls.

Based on Michaels example, split out the return of NT_STATUS_NO_MEMORY
on talloc fail from other possible errors. Allow the NTSTATUS return
to be the only valid indication of success in these calls.

Signed-off-by: Jeremy Allison j...@samba.org
Reviewed-by: Michael Adam ob...@samba.org
Reviewed-by: Andreas Schneider a...@samba.org

Autobuild-User(master): Andreas Schneider a...@cryptomilk.org
Autobuild-Date(master): Tue Dec 11 20:04:25 CET 2012 on sn-devel-104

commit a20c47410fb74716c0c8b2583fd4d0ae0145fd7d
Author: Michael Adam ob...@samba.org
Date:   Tue Dec 11 18:05:31 2012 +0100

s3:auth: fix dereference level in talloc checks in  create_token_from_sid()

Commit c5b150b33fc54ed97dbd0736cc6f4c15977d6e70 introduced these checks.
The current check found_username == NULL is wrong (we would segfault 
earlier
in this case). We need to check *found_username == NULL instead as
noted by Günter.

Reported-by: Günter Kukkukk li...@kukkukk.com
Signed-off-by: Michael Adam ob...@samba.org
Reviewed-by: Andreas Schneider a...@samba.org

---

Summary of changes:
 source3/auth/token_util.c |   19 +++
 1 files changed, 11 insertions(+), 8 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/auth/token_util.c b/source3/auth/token_util.c
index 8a73a71..ac242f1 100644
--- a/source3/auth/token_util.c
+++ b/source3/auth/token_util.c
@@ -610,7 +610,7 @@ static NTSTATUS create_token_from_sid(TALLOC_CTX *mem_ctx,
*found_username = talloc_strdup(mem_ctx,
pdb_get_username(sam_acct));
 
-   if (found_username == NULL) {
+   if (*found_username == NULL) {
result = NT_STATUS_NO_MEMORY;
goto done;
}
@@ -705,7 +705,7 @@ static NTSTATUS create_token_from_sid(TALLOC_CTX *mem_ctx,
 
/* Ensure we're returning the found_username on the right 
context. */
*found_username = talloc_strdup(mem_ctx, pass-pw_name);
-   if (found_username == NULL) {
+   if (*found_username == NULL) {
result = NT_STATUS_NO_MEMORY;
goto done;
}
@@ -837,16 +837,19 @@ NTSTATUS create_token_from_username(TALLOC_CTX *mem_ctx, 
const char *username,
goto done;
}
 
+   /*
+* If result == NT_STATUS_OK then
+* we know we have a valid token. Ensure
+* we also have a valid username to match.
+*/
+
if (*found_username == NULL) {
*found_username = talloc_strdup(mem_ctx, username);
+   if (*found_username == NULL) {
+   result = NT_STATUS_NO_MEMORY;
+   }
}
 
-   if ((*token == NULL) || (*found_username == NULL)) {
-   result = NT_STATUS_NO_MEMORY;
-   goto done;
-   }
-
-   result = NT_STATUS_OK;
 done:
TALLOC_FREE(tmp_ctx);
return result;


-- 
Samba Shared Repository


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  6e1a6b8 Add a registered trademark sign
  from  3e28ac8 Add missing spaces

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 6e1a6b860c7f0ad578471c943aecd8a1aa6123be
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 20:07:46 2012 +0100

Add a registered trademark sign

---

Summary of changes:
 news/releases/4.0.0.html |2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/news/releases/4.0.0.html b/news/releases/4.0.0.html
index 353381b..e9cfba8 100644
--- a/news/releases/4.0.0.html
+++ b/news/releases/4.0.0.html
@@ -8,7 +8,7 @@
 
 pThe Samba Team is proud to announce the release of Samba 4.0, a major
 new release of the award-winning Free Software file, print and
-authentication server suite for Microsoft Windows clients./p
+authentication server suite for Microsoft Windows#174; clients./p
 
 
 h3The First Free Software Active Directory Compatible Server/h3


-- 
Samba Website Repository


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  9e96e9c Add links to the press release
  from  6e1a6b8 Add a registered trademark sign

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 9e96e9c3d3b91993a3639594b4377de51ddcc089
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 20:26:59 2012 +0100

Add links to the press release

---

Summary of changes:
 generated_news/latest_10_bodies.html |4 +++-
 generated_news/latest_2_bodies.html  |4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index 63c0c12..1aead4c 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -6,7 +6,9 @@
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
 now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
-the release notes for more info/a./p
+the release notes for more info/a and for the
+a href= https://www.samba.org/samba/news/releases/4.0.0.html;
+press release/a./p
 
h5a name=3.6.1010 December 2012/a/h5
p class=headlineSamba 3.6.10 Available for Download/p
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index de0ea2e..3fb21d4 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -6,7 +6,9 @@
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
 now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
-the release notes for more info/a./p
+the release notes for more info/a and for the
+a href= https://www.samba.org/samba/news/releases/4.0.0.html;
+press release/a./p
 
 
h5a name=3.6.1010 December 2012/a/h5


-- 
Samba Website Repository


[SCM] Samba Website Repository - branch master updated

2012-12-11 Thread Lars Müller
The branch, master has been updated
   via  d3e615b Remove superflous 'for'
  from  9e96e9c Add links to the press release

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit d3e615bf857f23924b6993e6a72dab0f6ebdd289
Author: Lars Müller l...@samba.org
Date:   Tue Dec 11 20:31:42 2012 +0100

Remove superflous 'for'

---

Summary of changes:
 generated_news/latest_10_bodies.html |2 +-
 generated_news/latest_2_bodies.html  |2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index 1aead4c..98f8ead 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -6,7 +6,7 @@
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
 now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
-the release notes for more info/a and for the
+the release notes for more info/a and the
 a href= https://www.samba.org/samba/news/releases/4.0.0.html;
 press release/a./p
 
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index 3fb21d4..8cb2538 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -6,7 +6,7 @@
 using GnuPG (ID 6568B7EA).  The source code can be
 a href=http://samba.org/samba/ftp/stable/samba-4.0.0.tar.gz;downloaded
 now/a. See a href=http://samba.org/samba/history/samba-4.0.0.html;
-the release notes for more info/a and for the
+the release notes for more info/a and the
 a href= https://www.samba.org/samba/news/releases/4.0.0.html;
 press release/a./p
 


-- 
Samba Website Repository