[SCM] CTDB repository - branch master updated - ctdb-2.1-95-gb5a8791

2013-04-24 Thread Amitay Isaacs
The branch, master has been updated
   via  b5a8791268e938d7e017056e0e2bd2cbec1fa690 (commit)
   via  c7eab97c7a939710b73aae2d75b404b235a998f5 (commit)
   via  f99eb2f56d8ca27110a45ae0e1c4bff40ac7a60e (commit)
   via  a62775334aa20d1d850d2df705eb70303b04ac5c (commit)
   via  61f17e53576197def46bc61fdf0cdb5282333a3e (commit)
   via  c7924ce6404bb18641b00d5fbd2fe9da9aaf7959 (commit)
   via  61264debba58355b9716ac1637fdedef5ed249c8 (commit)
   via  06de786c786f1cab4c6721adf47c2cb1e8a72adb (commit)
   via  eee23d44b6427be8ab49bbfcee3abb62f37dfcc7 (commit)
   via  e397702e271af38204fd99733bbeba7c1db3a999 (commit)
   via  e3740899c1af6962f93c85ad7d1cb71bddce45c6 (commit)
   via  b7c3b8cdf92c597e621e3dae28b110d321de5ea8 (commit)
   via  59a887e12469266e514ad7d4e34810e7ea888ba3 (commit)
   via  11d728465a9c635e1829abaae17e2f7720433b69 (commit)
   via  3710dd0f313f551f1b302b4961e0203243e3d661 (commit)
   via  4640979b526b6dac69a6a0555bfce75fe0206dac (commit)
   via  f3e6e7f8ef22bd70dd2f101d818e2e5ab5ed3cd8 (commit)
   via  817c77a3d0a3546bf46389cec5f6b54778dd1693 (commit)
   via  3f7e35ff0db740cdcb6d27c43a59bb6ca6066efb (commit)
   via  e72a5e11845fe445baaee4730bb0bea8588ee9e3 (commit)
  from  dc4ca816630ed44b419108da53421331243fb8c7 (commit)

http://gitweb.samba.org/?p=ctdb.git;a=shortlog;h=master


- Log -
commit b5a8791268e938d7e017056e0e2bd2cbec1fa690
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 16:24:32 2013 +0200

recover: use CTDB_REC_RO_FLAGS where appropriate

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit c7eab97c7a939710b73aae2d75b404b235a998f5
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 16:23:16 2013 +0200

ctdb_daemon: use CTDB_REC_RO_FLAGS where appropriate

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit f99eb2f56d8ca27110a45ae0e1c4bff40ac7a60e
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 16:22:49 2013 +0200

ctdb_call: use CTDB_REC_RO_FLAGS where appropriate

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit a62775334aa20d1d850d2df705eb70303b04ac5c
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 16:09:34 2013 +0200

vacuum: use  CTDB_REC_RO_FLAGS in the vacuuming code

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit 61f17e53576197def46bc61fdf0cdb5282333a3e
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 15:55:38 2013 +0200

ltdb_server: use CTDB_REC_RO_FLAGS where appropriate

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit c7924ce6404bb18641b00d5fbd2fe9da9aaf7959
Author: Michael Adam ob...@samba.org
Date:   Fri Apr 19 16:01:45 2013 +0200

include: define CTDB_REC_RO_FLAGS - all read-only related record flags

This is used for some checks

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit 61264debba58355b9716ac1637fdedef5ed249c8
Author: Michael Adam ob...@samba.org
Date:   Fri Feb 22 16:12:17 2013 +0100

vacuum: Update (C)

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit 06de786c786f1cab4c6721adf47c2cb1e8a72adb
Author: Michael Adam ob...@samba.org
Date:   Sat Dec 29 17:23:27 2012 +0100

vacuum: extend the header comment for ctdb_process_delete_list()

Describe the (new) process more precisely.
And mention that is the last step of the vacuuming process
that is performed on the lmaster.

Signed-off-by: Michael Adam ob...@samba.org
Reviewed-By: Amitay Isaacs ami...@gmail.com

commit eee23d44b6427be8ab49bbfcee3abb62f37dfcc7
Author: Michael Adam ob...@samba.org
Date:   Sat Jan 5 01:20:18 2013 +0100

vacuum: turn the vacuuming on lmaster into a three-phase process.

More precisely, before locally deleting an empty record, that has been
migrated with data and that we are dmaster and laster for, we now perform
the deletion on the other nodes in two steps instead of a single step.

- First send out the list of records to be deleted to all
  other nodes with the new RECEIVE_RECORDS control to store
  the lmaster's current empty copy.
- Then send those records that could be deleted on all nodes
  to all nodes again with the TRY_DELETE_RECORDS control
  as before for deletion.
- Finally delete those records locally that were successfully
  deleted remotely in the previous step.

This fixes an old race where a recovery that hits the vacuum process
square between the eyes can create gaps in the record's history and
hence let the records resurrect. In the case of the 

[SCM] Samba Shared Repository - branch master updated

2013-04-24 Thread Andreas Schneider
The branch, master has been updated
   via  4b97a19 BUG 9817: Fix 'map untrusted to domain' with NTLMv2.
  from  19242b2 docs-xml: document dbwrap_tool exists

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 4b97a19e584cb216194c5eca1270ef1926fc9006
Author: Andreas Schneider a...@samba.org
Date:   Wed Apr 24 15:27:21 2013 +0200

BUG 9817: Fix 'map untrusted to domain' with NTLMv2.

Signed-off-by: Andreas Schneider a...@samba.org
Reviewed-by: Günther Deschner g...@samba.org
Reviewed-by: Stefan Metzmacher me...@samba.org

Autobuild-User(master): Andreas Schneider a...@cryptomilk.org
Autobuild-Date(master): Wed Apr 24 17:14:48 CEST 2013 on sn-devel-104

---

Summary of changes:
 source3/auth/auth_winbind.c |   10 --
 1 files changed, 8 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/auth/auth_winbind.c b/source3/auth/auth_winbind.c
index d4ace2c..2b5c84d 100644
--- a/source3/auth/auth_winbind.c
+++ b/source3/auth/auth_winbind.c
@@ -62,9 +62,15 @@ static NTSTATUS check_winbind_security(const struct 
auth_context *auth_context,
}
 
/* Send off request */
-
params.account_name = user_info-client.account_name;
-   params.domain_name  = user_info-mapped.domain_name;
+   /*
+* We need to send the domain name from the client to the DC. With
+* NTLMv2 the domain name is part of the hashed second challenge,
+* if we change the domain name, the DC will fail to verify the
+* challenge cause we changed the domain name, this is like a
+* man in the middle attack.
+*/
+   params.domain_name  = user_info-client.domain_name;
params.workstation_name = user_info-workstation_name;
 
params.flags= 0;


-- 
Samba Shared Repository


[SCM] Samba Shared Repository - branch master updated

2013-04-24 Thread Jeremy Allison
The branch, master has been updated
   via  727c611 source4/libcli: Only set ctemp set on success
   via  301a1f9 Implements a vfs module for cephfs, a distributed file 
system with posix semantics, built on the ceph distributed object storage 
layer.  The ceph vfs module interfaces to the libcephfs userspace API, and is 
primarily a lightweight wrapper around libcephfs, translating error codes and 
parameters as necessary.
  from  4b97a19 BUG 9817: Fix 'map untrusted to domain' with NTLMv2.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 727c611fe3c903d905871a46909ed1e7639add15
Author: Sam Lang sam.l...@inktank.com
Date:   Mon Apr 22 10:23:16 2013 -0500

source4/libcli: Only set ctemp set on success

If open fails ctemp.out.name probably won't be valid and strdup
will cause a segv.  Only set the path if open succeeds.

Signed-off-by: Sam Lang sam.l...@inktank.com
Reviewed-by: Volker Lendecke volker.lende...@sernet.de
Reviewed-by: Jeremy Allison j...@samba.org

Autobuild-User(master): Jeremy Allison j...@samba.org
Autobuild-Date(master): Wed Apr 24 23:58:44 CEST 2013 on sn-devel-104

commit 301a1f919202c90c629a4926ebdf054b9f2fe1e8
Author: Sam Lang sam.l...@inktank.com
Date:   Wed Apr 24 12:52:57 2013 -0700

Implements a vfs module for cephfs, a distributed file system
with posix semantics, built on the ceph distributed object
storage layer.  The ceph vfs module interfaces to the libcephfs
userspace API, and is primarily a lightweight wrapper around
libcephfs, translating error codes and parameters as necessary.

Signed-off-by: Sam Lang sam.l...@inktank.com
Reviewed-by: Volker Lendecke volker.lende...@sernet.de
Reviewed-by: Jeremy Allison j...@samba.org

---

Summary of changes:
 source3/Makefile.in   |5 +
 source3/configure.in  |   31 +
 source3/modules/vfs_ceph.c| 1261 +
 source3/modules/wscript_build |   10 +
 source3/wscript   |   15 +
 source4/libcli/clifile.c  |   15 +-
 6 files changed, 1330 insertions(+), 7 deletions(-)
 create mode 100644 source3/modules/vfs_ceph.c


Changeset truncated at 500 lines:

diff --git a/source3/Makefile.in b/source3/Makefile.in
index a868685..c701fd1 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -913,6 +913,7 @@ VFS_LINUX_XFS_SGID_OBJ = modules/vfs_linux_xfs_sgid.o
 VFS_TIME_AUDIT_OBJ = modules/vfs_time_audit.o
 VFS_MEDIA_HARMONY_OBJ = modules/vfs_media_harmony.o
 VFS_BTRFS_OBJ = modules/vfs_btrfs.o
+VFS_CEPH_OBJ = modules/vfs_ceph.o
 
 PAM_ERRORS_OBJ = ../libcli/auth/pam_errors.o
 PLAINTEXT_AUTH_OBJ = auth/pampass.o auth/pass_check.o $(PAM_ERRORS_OBJ)
@@ -2965,6 +2966,10 @@ bin/btrfs.@SHLIBEXT@: $(BINARY_PREREQS) $(VFS_BTRFS_OBJ)
@echo Building plugin $@
@$(SHLD_MODULE) $(VFS_BTRFS_OBJ)
 
+bin/ceph.@SHLIBEXT@: $(BINARY_PREREQS) $(VFS_CEPH_OBJ)
+   @echo Building plugin $@
+   @$(SHLD_MODULE) $(VFS_CEPH_OBJ)
+
 #
 ## IdMap NSS plugins
 
diff --git a/source3/configure.in b/source3/configure.in
index 88c71d4..d2aa215 100644
--- a/source3/configure.in
+++ b/source3/configure.in
@@ -1023,6 +1023,36 @@ if test x$ac_cv_header_gpfs_gpl_h = xyes; then
 default_shared_modules=$default_shared_modules vfs_gpfs
 fi
 
+#
+# check if building with libcephfs
+# fail if --with-libcephfs specified but no headers found
+printf %s checking for CephFS... 
+AC_CHECK_HEADERS(cephfs/libcephfs.h)
+
+save_LIBS=$LIBS
+LIBS=$LIBS -lcephfs
+AC_TRY_LINK([#include cephfs/libcephfs.h],
+ [ceph_version(0, 0, 0)],
+ samba_cv_HAVE_CEPHFS=yes,
+ samba_cv_HAVE_CEPHFS=no
+ )
+
+if test x$ac_cv_header_cephfs_libcephfs_h = xyes  test 
x$samba_cv_HAVE_CEPHFS = xyes; then
+AC_DEFINE(HAVE_CEPH, 1, [Whether CEPH headers are available])
+default_shared_modules=$default_shared_modules vfs_ceph
+save_CFLAGS=$CFLAGS
+save_LDFLAGS=$LDFLAGS
+save_LIBS=$save_LIBS -lcephfs
+else
+if test x$CEPHFS_PATH_SPEC = xyes; then
+AC_MSG_ERROR([No valid libcephfs found in ${CEPHFS_PATH}])
+fi
+fi
+
+CFLAGS=$save_CFLAGS
+LDFLAGS=$save_LDFLAGS
+LIBS=$save_LIBS
+
 # Note that all the libunwind symbols in the API are defined to internal
 # platform-specific version, so we must include libunwind.h before checking
 # any of them.
@@ -6455,6 +6485,7 @@ SMB_MODULE(vfs_linux_xfs_sgid, 
\$(VFS_LINUX_XFS_SGID_OBJ), bin/linux_xfs_sgid.$
 SMB_MODULE(vfs_time_audit, \$(VFS_TIME_AUDIT_OBJ), bin/time_audit.$SHLIBEXT, 
VFS)
 SMB_MODULE(vfs_media_harmony, \$(VFS_MEDIA_HARMONY_OBJ), 
bin/media_harmony.$SHLIBEXT, VFS)
 SMB_MODULE(vfs_btrfs, \$(VFS_BTRFS_OBJ), bin/btrfs.$SHLIBEXT, VFS)
+SMB_MODULE(vfs_ceph, \$(VFS_CEPH_OBJ),