The annotated tag, tevent-0.9.36 has been created
        at  723efca0723b9afd371696a299d3fb075eaf4e62 (tag)
   tagging  f00c7cf9f5f325de0b754b127fcc0f07bea2d825 (commit)
  replaces  samba-4.8.0rc1
 tagged by  Stefan Metzmacher
        on  Fri Feb 23 11:29:49 2018 +0100

- Log -----------------------------------------------------------------
tevent: tag release tevent-0.9.36
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAABAgAGBQJaj+0dAAoJEEeTkWETCEAld2oIALkV5EHRPCX+RN5e/4zSSKi8
T27bI9blUkTiwllvQE80M5O4GGM4KN68GxDZKuUm35PXO+7Oj/137VdPEdhqHbq/
lj57fUhqI4b83DTeRvUMgAJg6KIzjoKqWG2JTMr3v6OPhRouecClzI73Bm8/LSnl
HkiHnltMyrLUM335aByK7DgjYw7BD2NPjiCIrhmzqyAJp8NQ8RhyzFfa83+Ze6/6
tQLy9VOVrkMrN5X/7h5ptISj0TbUgAtV/1Zmjf+279kJ7VAcIXGM7SCt3qrk503P
h7UFbJvFzEoBcriL5EK2q1IiCo6ma3PSw/oAVW1JmMAHA2ttA2sv7HEW0JpVumc=
=fio0
-----END PGP SIGNATURE-----

Alexander Bokovoy (1):
      mit-kdb: support MIT Kerberos 1.16 KDB API changes

Amitay Isaacs (1):
      ctdb-tests: Avoid race condition in sock_daemon test 5

Andreas Schneider (23):
      s3:winbindd: Improve logic so it is easier to understand
      s3:winbind: Use a goto for cleaning up at the end
      s3:winbind: Use a stackframe and cleanup when leaving
      s3:rpc_client: Clenup copy_netr_SamInfo3() code
      s3:waf: Move HAVE_NETGROUP to wscript
      include: Create system/nis.h in libreplace
      wafsamba: Allow passing 'lib' to CHECK_STRUCTURE_MEMBER
      waf: Fix NFS quota support with libtirpc
      winbindd: Free memory before we exit the connect child
      winbindd: Free is_parent before we terminate
      winbindd: Initialize the domain groups member
      docs: Fix smbpasswd manpage about password storage
      docs: Add a not that 'wbinfo --user-groups' may be incomplete
      python: Generate random test usernames
      python: Convert base64 encoded password to utf-8
      smbspool: Initialize empty_str on declaration
      s3:tldap: Fix parsing LDAPv2 escaped strings
      s3:tldap: Comment code for to LDAP escaping version
      tests: Add tests for parsing LDAPv3 and LDAPv2 filter strings
      smbspool: Improve URI handling code
      s3:auth: Pass a mem_ctx to make_new_session_info_guest()
      s3:auth: Pass mem_ctx to init_guest_session_info()
      s3:auth: Pass mem_ctx to init_system_session_info()

Andrew Bartlett (10):
      WHATSNEW: Add section for "samba-tool visualize"
      WHATSNEW: Mention new option "apply group policies"
      lib/crypto: Update REQUIREMENTS for recent Samba changes
      python/samdb: Allow samdb.normalize_dn_in_domain() to take an ldb.Dn()
      python/samdb: Improve function comment on normalize_dn_in_domain()
      selftest: Add tests for samdb.normalize_dn_in_domain()
      lib/crypto/REQUIREMENTS: DRSUAPI replication replicated secrets was 
missing from the RC4 section
      selftest: Require jansson support for selftest of the AD DC
      selftest: GnuTLS is already mandetory to build the AD DC
      selftest: Avoid a build started around midnight failing (again)

Bjoern Jacke (1):
      heimdal_build: use closefrom from libreplace

Björn Baumbach (15):
      pyldb: extend dn.is_child_of() test: dn is child of itself
      python/samdb: add method normalize_dn_in_domain(): get full dn of an 
relative dn
      samba-tool: implement ou management commands
      tests/samba-tool: add tests for new ou management commands
      docs-xml:samba-tool.8: document ou management commands
      samba-tool: implement user show command to display a user AD object
      docs-xml:samba-tool.8: document "user show" command
      tests/samba-tool: add test for samba-tool user show command
      samba-tool user: fix some typos
      samba-tool user: implement the user move command
      docs-xml:samba-tool.8: document "user move" command
      tests/samba-tool: add tests for user move command
      samba-tool group: implement the group move command
      docs-xml:samba-tool.8: document "group move" command
      tests/samba-tool: add tests for samba-tool group move command

Björn Jacke (3):
      s3: remove dead already commented code
      wscript: drop checks for setnetgrent/endnetgrent/getnetgrent
      replace: remove some duplicate checks

Christof Schmitt (1):
      Remove file system sharemode before calling unlink

David Mulder (2):
      gpo: Correct documentation
      gpo: Correct WHATSNEW

Douglas Bagnall (36):
      tests/samba-tool user_wdigest: avoid py3-incompatible md5 module
      tests/password_hash: avoid py3-incompatible md5 module
      tests/samba_tool user virtualCryptSHA: remove unused py3 incompatible 
import
      python samdb.newuser(): use user DN not samaccountname to set password
      subunit.run: report failure in process return code
      samba-tool rodc: consistently use self.outf, not stdout
      sambatool drs showrepl: prefer self over ctx in python classes
      tests: SambaToolCmdTest.assertMatch() indicates what was asserted
      tests/samba-tool user wdigest: fix a flapping test
      python.subunit: add assertRegexpMatches for Python 2.6
      tests: move samba-tool drs showrepl into its own suite
      test samba-tool drs showrepl: fix formatting and unused imports
      test samba-tool drs showrepl: test expected output more strictly
      samba-tool drs showrepl: restructure in preparation for --json
      samba-tool drs showrepl: add --json option for JSON output
      test samba-tool drs showrepl: test --json output
      samba-tool: convert 'except X, e' to 'except X as e' for all X
      samba python libs: convert 'except X, e' to 'except X as e'
      samba python tests: convert 'except X, e' to 'except X as e'
      dsdb python tests: convert 'except X, e' to 'except X as e'
      source4/scripting python: convert 'except X, e' to 'except X as e'
      drs torture python: convert 'except X, e' to 'except X as e'
      selftest and autrobuild: convert 'except X, e' to 'except X as e'
      scripts/ python: convert 'except X, e' to 'except X as e'
      buildtools python: convert 'except X, e' to 'except X as e'
      python/tests/sites: ensure we can't manipulate subnets as non-admin
      selftest: subunithelper needs to follow the subunit spec more closely
      unittests.lib_util_modules: test module probe with "skel", not "unix"
      selftest/tests.py: remove always-needed, never-set with_cmocka flag
      shift read_hex_bytes() and parse_guid_string() into lib/util
      util/rfc1738_unescape(): return end pointer or NULL on error
      util/tests: add rfc1738 cmocka tests
      util/rfc1738: simplify and fix rfc1738_unescape()
      util/rfc1738: remove unused versions of rfc1738_escape
      util/rfc1738: simplify and fix rfc1738_escape_part()
      util/rfc1738: update preamble

Garming Sam (13):
      remove_dc: Allow remove_dns_references to ignore missing server names
      tests/samba-tool: dns cleanup should work with a missing name
      samba-tool/dns: Clarify the cleanup subcommand
      samba-tool/tests: Check that dns cleanup does not spuriously remove 
entries
      tests/replica_sync: Add some additional replication in setUp
      tests/drs_base: Allow the net drs replicate to try with a single object
      selftest: Add RODC variables to list of those exported
      tests/replica_sync_rodc: Test conflict handling on an RODC
      repl_metadata: Avoid silent skipping an object during DRS (due to RODC 
name collisions)
      repl_metadata: Avoid silent skipping an object during DRS (due to RODC 
rename collisions)
      subnet: Avoid a segfault when renaming subnet objects
      tests/py_creds: Add a SamLogonEx test with an empty string domain
      tests/bind.py: Add a bind test with NTLMSSP with no domain

Gary Lockyer (3):
      samdb: Add tests for samdb tdb file creation.
      pyldb: Expose extra flags
      python SamDB: init default flags to FLG_DONT_CREATE_DB

Günther Deschner (4):
      python: fix the build with python3.
      packaging: fix default systemd-dir path.
      build: deal with recent glibc sunrpc header removal
      build: fix libceph-common detection

Jamie McClymont (4):
      selftest: fix envvars for creation of default user in wait_for_start
      selftest: remove prototypes from some subroutine templates
      selftest: move to declaratively specifying environments and their 
dependencies
      selftest: change technique for running specific envs

Jeremy Allison (2):
      s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error, we 
don't own it here.
      s3: librpc: Allow client to correctly report etype unsupported by KDC to 
caller.

Joe Guo (1):
      samba-tool: add dns cleanup cmd

Karolin Seeger (3):
      VERSION: Bump version up to 4.9.0pre1...
      docs-xml: Add 'samba-tool visualize' to man samba-tool.8.
      WHATSNEW: Start release notes for Samba 4.9.

Lumir Balhar (5):
      python: Port dsdb_dns module to Python 3 compatible form.
      python: Add `text_type` Python 2/3 compatible function name.
      python: Port samdb module to Python 3 compatible form
      python: Port dsdb module to Python 3 compatible form.
      python: tests: Make tests of dsdb Python module Python 3 compatible

Martin Schwenke (6):
      talloc: Fix documentation typo
      ctdb-tests: Add timeout for individual tests, default is 10 minutes
      ctdb-tests: Only use socket-wrapper for simple, local daemon tests
      ctdb-tests: Add a UNIT pseudo-test-suite
      ctdb-tests: Fix a typo
      ctdb-tests: Set test timeout to an hour

Puran Chand (1):
      Added smbc_SetConfiguration which lets the user set the smb.conf for 
libsmbclient code

Ralph Boehme (21):
      selftest: run deltest20 against s3 as well
      s3/smbd: fix handling of delete-on-close on directories
      Revert "dbcheck: disable fixing duplicate linked attributes until we can 
recover lost forward links"
      selftest/dbcheck: add a test for corrupt forward links restoration
      dbcheck: rename and reorder err_orphaned_backlink arguments
      dbcheck: add forward_syntax argument to err_orphaned_backlink
      dbcheck: rename err_duplicate_links arguments
      dbcheck: add link direction to error message for duplicate links
      dbcheck: rename err_duplicate_links() to err_recover_forward_links() and 
adjust the output message
      dbcheck: split out check_duplicate_links from check_dn
      dbcheck: add a dict where we remember attributes with duplicate links
      dbcheck: add a helper function that checks is a value has duplicate links
      dbcheck: add find_missing_forward_links_from_backlinks()
      dbcheck: add support for restoring missing forward links
      winbindd: add routing_domain as parameter to add_trusted_domain
      winbindd: move loading of trusted domains on a DC to a seperate function
      winbindd: use add_trusted_domains_dc in wb_imsg_new_trusted_domain
      s4/rpc_server: remove unused data argument from 
MSG_WINBIND_NEW_TRUSTED_DOMAIN
      winbindd: rename MSG_WINBIND_NEW_TRUSTED_DOMAIN to 
MSG_WINBIND_RELOAD_TRUSTED_DOMAINS
      s4/rpc_server: trigger trusts reload in winbindd after successfull trust 
info acquisition
      rpcclient: fix variable initialisation and add parenthesis to if clauses

Sachin Prabhu (1):
      vfs_glusterfs: Add fallocate support for vfs_glusterfs

Stefan Metzmacher (84):
      testprogs:blackbox: add regression test for unsorted links in 
tombstones-expunge.sh
      repl_meta_data: fix linked attribute corruption on databases with 
unsorted links on expunge
      dbcheck: disable fixing duplicate linked attributes until we can recover 
lost forward links
      python/netcmd: implement __repr__ for class CommandError
      python:tests: use TestCaseInTempDir for "samba.tests.common"
      python:tests: remove test_dsdb_Dn() to test_dsdb_Dn_binary()
      python:tests: add test_dsdb_Dn_sorted() to "samba.tests.common"
      python/common: add __cmp__ function to dsdb_Dn similar to 
parsed_dn_compare()
      dbcheck: only pass obj_dn to err_orphaned_backlink()
      dbcheck: remove ldb.FLAG_MOD_REPLACE when replacing search results for 
forward links
      dbcheck: store fixed forward link attributes with the correct sorting
      dbcheck: make sure we always ask for the objectGUID attribute explicitly
      dbcheck: make sure we ask for replPropertyMetaData if we need to process 
any forward link attributes
      dbcheck: skip find_missing_forward_links_from_backlinks() if the db has 
the sortedLinks feature
      selftest: run "samba.tests.common"
      winbindd: fix LSA connections via DCERPC_AUTH_SCHANNEL
      winbindd: remove useless calls to get_trust_credentials() before 
cli_rpc_pipe_open_schannel_with_creds()
      winbindd: add missing can_do_ncacn_ip_tcp initialisation
      s3:rpc_client: allow Netlogon{Network,Interactive}TransitiveInformation 
in rpccli_netlogon_password_logon()
      s3:rpc_client: allow passing NetlogonNetwork[Transitive]Information to 
rpccli_netlogon_network_logon()
      winbindd: use Netlogon{Interactive,Network}TransitiveInformation on 
transitive trusts
      winbindd: remove const from set_routing_domain()
      winbindd: prepare find_auth_domain() transitive trusts on a DC
      winbindd: prepare find_lookup_domain_from_{name,sid}() transitive trusts 
on a DC
      s3:rpc_client: pass down lsa_LookupNamesLevel to 
dcerpc_lsa_lookup_sids_generic()
      winbindd: don't force using LSA_LOOKUP_NAMES_ALL for non workstation 
trusts.
      winbindd: fix debug message in find_default_route_domain() on a DC
      wbinfo: avoid segfault in wbinfo_auth_crap() if winbindd is not available
      winbindd: add_trusted_domain_from_auth() should not use dns_name = ""
      s3/rpc_client: add rpccli_netlogon_interactive_logon()
      winbindd: separate plaintext given and interactive in 
winbind_samlogon_retry_loop()
      winbindd: add a comment to a parameter in _winbind_SamLogon()
      winbindd: pass 'bool interactive' to winbind_dual_SamLogon()
      winbindd: handle interactive logons in _winbind_SamLogon()
      winbindd: introduce a cm_connect_netlogon_secure() which gives a valid 
netlogon_creds_ctx
      s3/rpc_client: add copy_netr_SamInfo6() and map_validation_to_info6()
      winbindd: allow validation level 6 in winbind_SamLogon
      s4/auth_winbind: ask for validation level 6
      s3/auth: add create_info6_from_pac()
      s3/rpc_client: add map_info6_to_validation()
      winbindd: get netr_SamInfo6 out of winbindd_dual_pam_auth_kerberos()
      winbindd: call add_trusted_domain_from_auth() in 
winbindd_pam_auth_crap_done()
      winbindd: let winbindd_pam_auth_pac_send() compute info6 from PAC
      winbindd: complete WBFLAG_PAM_AUTH_PAC handling in 
winbindd_pam_auth_crap_send()
      winbindd: rename winbindd_pam_auth_pac_send and let it return validation
      winbindd: WBFLAG_PAM_AUTH_PAC should call add_trusted_domain_from_auth() 
is the result is trusted
      winbindd: don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids
      winbindd: initialize type = SID_NAME_UNKNOWN in 
wb_lookupsids_single_done()
      s3:cli_lsarpc: use talloc_zero_array() in dcerpc_lsa_lookup_sids_generic()
      s3:cli_lsarpc: use talloc_zero_array() in 
dcerpc_lsa_lookup_names_generic()
      winbindd: make use of talloc_zero_array() in wb_lookupsids*()
      s4:torture: zero initialize variables in test_LookupSidsReply()
      nsswitch: fix double free errors in nsstest.c
      traffic_packets.py: let Lookup{Sids,Names}() work against a sane server
      provision: fix the 'dnsdomain' for the local sam of a domain member
      rpcclient: add lookupsids_level command
      s4:rpc_server/lsa: use 
LSA_LOOKUP_OPTION_SEARCH_ISOLATED_NAMES/LSA_CLIENT_REVISION_1 in compat code
      s4:rpc_server/lsa: make sure dcesrv_lsa_LookupSids_common() gets prepared 
[ref] pointers
      s4:rpc_server/lsa: expect prepared [ref] pointers in 
dcesrv_lsa_LookupNames_common()
      s4:rpc_server/lsa: make sure dcesrv_lsa_LookupNames2() gets prepared 
[ref] pointers
      s4:rpc_server/lsa: remove unused 'status' variable in 
dcesrv_lsa_LookupSids_common()
      s4:rpc_server/lsa: simplify [ref] pointer handling in 
dcesrv_lsa_LookupSids()
      s4:rpc_server/lsa: simplify [ref] pointer handling in 
dcesrv_lsa_LookupNames()
      s4:rpc_server/lsa: rename 'state' variable to 'policy_state' in 
dcesrv_lsa_LookupSids_common()
      s4:rpc_server/lsa: rename 'state' variable to 'policy_state' in 
dcesrv_lsa_LookupSids2()
      s4:rpc_server/lsa: rename 'state' variable to 'policy_state' in 
dcesrv_lsa_LookupNames2()
      s4:rpc_server/lsa: base dcesrv_lsa_LookupNames() on 
dcesrv_lsa_LookupNames_common()
      s4:rpc_server/lsa: base dcesrv_lsa_LookupNames2() on 
dcesrv_lsa_LookupNames_common()
      s4:rpc_server/lsa: prepare dcesrv_lsa_LookupSids* for async processing
      s4:rpc_server/lsa: prepare dcesrv_lsa_LookupNames* for async processing
      s4:dsdb: add dsdb_trust_domain_by_{sid,name}()
      libcli/security: add dom_sid_lookup_predefined_{sid,name}()
      test_trust_ntlm.sh: add lookup name tests
      s4:rpc_server/lsa: rewrite lookup sids/names code to honor the given 
lookup level
      winbindd: implement wb_irpc_lsa_{LookupNames4,LookupSids3}()
      s4:rpc_server/lsa: implement forwarding lsa_Lookup{Sids,Names}() requests 
to winbindd
      tests:dcerpc/raw_protocol: reproduce call_id truncation bug
      s4:rpc_server: fix call_id truncation in dcesrv_find_fragmented_call()
      s3:libsmb: allow -U"\\administrator" to work
      s3:cliconnect.c: remove useless ';'
      s4:auth_sam: allow logons with an empty domain name
      tevent: improve documentation of tevent_queue_add_optimize_empty()
      tevent: add tevent_queue_entry_untrigger()
      tevent: version 0.9.36

Swen Schillig (5):
      Fix wrong condition for error string assignment
      ctdb-common: Return if packet size is zero
      ctdb-common: Remove sock_queue_destructor
      ctdb-common: Optimize sock_queue's memory managament
      talloc_zero libnet_context on init

Timur I. Bakeyev (3):
      Don't load LDB_MODULESDIR as a module file
      Remove some bashisms from the test scripts
      Fix incorrect `ldbsearch` invocation

Trever L. Adams (7):
      Samba-VirusFilter: memcache changes.
      Samba-VirusFilter: common headers and sources.
      Samba-VirusFilter: Sophos VFS backend.
      Samba-VirusFilter: F-Secure AntiVirus (fsav) VFS and man page.
      Samba-VirusFilter: clamav VFS and man page.
      Samba-VirusFilter: fix virusfilter_vfs_close() crash
      Samba-VirusFilter: clean up dir check vfs_close and vfs_open

Volker Lendecke (64):
      rpc_server: Improve a debug message
      srcctl3: Improve debug messages
      pdb: Fix CID 1427624 Resource leak
      winbind: Fix CID 1427626 Uninitialized scalar variable
      pdb: Fix CID 1427620 Resource leak
      winbind: Fix CID 1427626 Uninitialized scalar variable
      vfs_fileid: Fix the 32-bit build
      docs: Remove prog_guide4.txt
      libsmb: Give unexpected.c its own header
      libnmb: Remove a pointless struct member
      libnmb: tsocket_address_unix_from_path deals fine with NULL
      libnmb: Fix two signed/unsigned hickups
      dsgetdcname: Fix a signed/unsigned hickup
      libcli/resolve: Fix typos
      libcli/resolve: Make functions static
      libcli/resolve: Make functions static
      libnmb: Add "parse_packet_talloc"
      libnmb: Make nb_packet_read_recv return a talloc'ed pkt
      libnmb: Move "read_packet" to nmbd
      libnmb: Fix CID 1428474 Incorrect expression (COPY_PASTE_ERROR)
      libnet: Use talloc_zero instead of ZERO_STRUCTP
      libcli: Remove finddcs_nbt.c
      vfs_virusfilter: Fix CID 1428739 Buffer not null terminated
      vfs_virusfilter: Fix CID 1428740 Macro compares unsigned to 0
      vfs_virusfilter: Fix CID 1428738 Macro compares unsigned to 0
      libads: Fix the build --without-ads
      libgpo: Fix the build --without-ads
      lib: Make g_lock_lock_send use TDB_DATA
      lib: Make g_lock_lock use TDB_DATA
      lib: Make g_lock_unlock use TDB_DATA
      lib: Make g_lock_write_data use TDB_DATA
      lib: Make g_lock_do use TDB_DATA
      lib: Make g_lock_dump use TDB_DATA
      lib: Make g_lock_locks use TDB_DATA
      winbind: Improve child selection
      smbd: Fix a signed/unsigned hickup
      smbd: Pass "file_id" through share_entry_forall
      srvsvc: Use the passed-in file id, not the one from share_mode_entry
      smbd: Pass in "file_id" into share_mode_str()
      smbd: Pass in "file_id" into validate_my_share_entries
      srvsvc: Use the passed-in file_id
      smbd: Use "share_mode_data->id", not "share_mode_entry->id"
      smbd: Remove a redundant check
      smbd: Pass "file_id" explicitly into share_mode_entry_to_message()
      smbd: Pass "file_id" explicitly to message_to_share_mode_entry()
      smbd: Avoid a dependency on share_mode_entry->id
      smbd: Avoid a dependency on share_mode_entry->id
      srvsvc: Avoid a dependency on share_mode_entry->id
      smbd: Pass "file_id" explicitly to send_break_message()
      smbd: Pass "file_id" explicitly to send_break_to_none
      smbd: remove "id" from share_mode_entry
      libnbt: Use TALLOC_FREE
      libnbt: Apply some const
      nbt_server: Fix a typo
      net: Add some {}
      libcli: Fix a cut&paste typo
      libsmb: Fix destructor setup in unexpected.c
      libsmb: Fix an error path memleak
      dsgetdcname: Add some const
      net: Slightly simplify net_lookup_dsgetdcname()
      libsocket: Avoid an unnecessary else branch
      winbind: Don't explicitly send "server_id" for ONLINESTATUS
      winbind: Don't send "server_id" explicitly for DUMP_DOMAIN_LIST
      tldap: Dump unnecessary includes

-----------------------------------------------------------------------


-- 
Samba Shared Repository

Reply via email to