[SCM] Samba Shared Repository - branch master updated

2013-10-08 Thread David Disseldorp 
The branch, master has been updated
   via  0de6282 Fix bug #10187 - Missing talloc_free can leak stackframe in 
error path.
  from  0239315 smbd: Fix an error path in open_directory

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 0de6282e00e1052d8facf6bcad69f2b8fa547895
Author: Jeremy Allison 
Date:   Tue Oct 8 15:01:38 2013 -0700

Fix bug #10187 - Missing talloc_free can leak stackframe in error path.

Fix error path.

Signed-off-by: Jeremy Allison 
Reviewed-by: David Disseldorp 

Autobuild-User(master): David Disseldorp 
Autobuild-Date(master): Wed Oct  9 03:50:56 CEST 2013 on sn-devel-104

---

Summary of changes:
 source3/winbindd/winbindd_msrpc.c |5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_msrpc.c 
b/source3/winbindd/winbindd_msrpc.c
index e86838c..61447d3 100644
--- a/source3/winbindd/winbindd_msrpc.c
+++ b/source3/winbindd/winbindd_msrpc.c
@@ -944,8 +944,9 @@ static NTSTATUS msrpc_trusted_domains(struct 
winbindd_domain *domain,
}
 
status = cm_connect_lsa(domain, tmp_ctx, &lsa_pipe, &lsa_policy);
-   if (!NT_STATUS_IS_OK(status))
-   return status;
+   if (!NT_STATUS_IS_OK(status)) {
+   goto done;
+   }
 
status = rpc_trusted_domains(tmp_ctx,
 lsa_pipe,


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch master updated

2013-10-08 Thread Jeremy Allison 
The branch, master has been updated
   via  0239315 smbd: Fix an error path in open_directory
   via  0cc2123 smbd: Simplify set_share_mode
   via  b8b7e85 smbd: Simplify find_share_mode_entry callers
   via  e0e5f67 smbd: Convert set_share_mode to return bool for success
   via  ad2ba58 smbd: Make add_share_mode return bool
   via  f9554a9 smbd: Change parameter from unsigned to uint32_t
  from  2ad37cb lib/util: remove unused (and not even compiled) 
lib/util/capability.c.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 02393156de280748d4e87f231d477fa70437a8a0
Author: Volker Lendecke 
Date:   Mon Oct 7 20:13:28 2013 +

smbd: Fix an error path in open_directory

In open_file_ntcreate we do the del_share_mode on error. We should do
it here as well.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Oct  9 01:58:55 CEST 2013 on sn-devel-104

commit 0cc212385c4b622bb1fa5055cde87ab43de36e45
Author: Volker Lendecke 
Date:   Mon Sep 16 14:02:48 2013 -0700

smbd: Simplify set_share_mode

With the find_share_mode simplification we don't need fill_share_mode 
anymore.
So this coalesces add_share_mode as well.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit b8b7e855ce1fd4bfdd06addcb824396418025dc8
Author: Volker Lendecke 
Date:   Mon Sep 16 13:58:54 2013 -0700

smbd: Simplify find_share_mode_entry callers

All callers used fill_share_mode_entry before calling
find_share_mode_entry. Remove that requirement.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit e0e5f67da522521a37622a5833b8699ae63e8c27
Author: Volker Lendecke 
Date:   Sat Sep 14 13:49:14 2013 +0200

smbd: Convert set_share_mode to return bool for success

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit ad2ba58f53a7fb6b87511288cb450f1327f1ccbf
Author: Volker Lendecke 
Date:   Sat Sep 14 13:48:03 2013 +0200

smbd: Make add_share_mode return bool

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit f9554a993ecb345b8773a911a6e98a7f2329422b
Author: Volker Lendecke 
Date:   Wed Sep 25 18:39:27 2013 -0700

smbd: Change parameter from unsigned to uint32_t

share_mode_stale_pid internally only has to deal with uint32_t. Make
the parameter match this.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

---

Summary of changes:
 source3/locking/locking.c |  111 +
 source3/locking/proto.h   |4 +-
 source3/smbd/open.c   |   20 ++--
 3 files changed, 59 insertions(+), 76 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/locking/locking.c b/source3/locking/locking.c
index d0b6eaf..b9db27c 100644
--- a/source3/locking/locking.c
+++ b/source3/locking/locking.c
@@ -636,7 +636,7 @@ bool is_valid_share_mode_entry(const struct 
share_mode_entry *e)
  * being used, we need to make sure the corresponding process still
  * exists.
  */
-bool share_mode_stale_pid(struct share_mode_data *d, unsigned idx)
+bool share_mode_stale_pid(struct share_mode_data *d, uint32_t idx)
 {
struct share_mode_entry *e;
 
@@ -693,14 +693,22 @@ bool share_mode_stale_pid(struct share_mode_data *d, 
unsigned idx)
return true;
 }
 
-/***
- Fill a share mode entry.
-/
-
-static void fill_share_mode_entry(struct share_mode_entry *e,
- files_struct *fsp,
- uid_t uid, uint64_t mid, uint16 op_type)
+bool set_share_mode(struct share_mode_lock *lck, files_struct *fsp,
+   uid_t uid, uint64_t mid, uint16 op_type)
 {
+   struct share_mode_data *d = lck->data;
+   struct share_mode_entry *tmp, *e;
+
+   tmp = talloc_realloc(d, d->share_modes, struct share_mode_entry,
+d->num_share_modes+1);
+   if (tmp == NULL) {
+   return false;
+   }
+   d->share_modes = tmp;
+   e = &d->share_modes[d->num_share_modes];
+   d->num_share_modes += 1;
+   d->modified = true;
+
ZERO_STRUCTP(e);
e->pid = messaging_server_id(fsp->conn->sconn->msg_ctx);
e->share_access = fsp->share_access;
@@ -715,58 +723,35 @@ static void fill_share_mode_entry(struct share_mode_entry 
*e,
e->uid = (uint32)uid;
e->flags = fsp->posix_open ? SHARE_MODE_FLAG_POSIX_OPEN : 0;
e->name_hash = fsp->name_hash;
-}
-
-static void add_share_mode_entry(struct share_mode_data *d,
-const struct share_mode

[SCM] Samba Shared Repository - branch master updated

2013-10-08 Thread Andreas Schneider 
The branch, master has been updated
   via  2ad37cb lib/util: remove unused (and not even compiled) 
lib/util/capability.c.
  from  51c612e Remove check_col from generated DCE/RPC dissectors.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 2ad37cbd0ef7ae89d4ecc049b74fef2c4c7da02c
Author: Günther Deschner 
Date:   Tue Oct 8 14:52:57 2013 +0200

lib/util: remove unused (and not even compiled) lib/util/capability.c.

Guenther

Signed-off-by: Günther Deschner 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Tue Oct  8 17:32:59 CEST 2013 on sn-devel-104

---

Summary of changes:
 lib/util/capability.c |  103 -
 1 files changed, 0 insertions(+), 103 deletions(-)
 delete mode 100644 lib/util/capability.c


Changeset truncated at 500 lines:

diff --git a/lib/util/capability.c b/lib/util/capability.c
deleted file mode 100644
index 2d13826..000
--- a/lib/util/capability.c
+++ /dev/null
@@ -1,103 +0,0 @@
-/* 
-   Unix SMB/CIFS implementation.
-
-   Copyright (C) Andrew Tridgell 1992-1998
-   Copyright (C) Jeremy Allison 1998-2002
-   
-   This program is free software; you can redistribute it and/or modify
-   it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 3 of the License, or
-   (at your option) any later version.
-   
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-   GNU General Public License for more details.
-   
-   You should have received a copy of the GNU General Public License
-   along with this program.  If not, see .
-*/
-
-/**
- * @file
- * @brief Capabilities functions
- **/
-
-/*
-  capabilities fns - will be needed when we enable kernel oplocks
-*/
-
-#include "includes.h"
-#include "system/network.h"
-#include "system/wait.h"
-#include "system/filesys.h"
-
-
-#if defined(HAVE_IRIX_SPECIFIC_CAPABILITIES)
-/**
- Try and abstract process capabilities (for systems that have them).
-/
-static bool set_process_capability( uint32_t cap_flag, bool enable )
-{
-   if(cap_flag == KERNEL_OPLOCK_CAPABILITY) {
-   cap_t cap = cap_get_proc();
-
-   if (cap == NULL) {
-   DEBUG(0,("set_process_capability: cap_get_proc failed. 
Error was %s\n",
-   strerror(errno)));
-   return false;
-   }
-
-   if(enable)
-   cap->cap_effective |= CAP_NETWORK_MGT;
-   else
-   cap->cap_effective &= ~CAP_NETWORK_MGT;
-
-   if (cap_set_proc(cap) == -1) {
-   DEBUG(0,("set_process_capability: cap_set_proc failed. 
Error was %s\n",
-   strerror(errno)));
-   cap_free(cap);
-   return false;
-   }
-
-   cap_free(cap);
-
-   DEBUG(10,("set_process_capability: Set 
KERNEL_OPLOCK_CAPABILITY.\n"));
-   }
-   return true;
-}
-
-/**
- Try and abstract inherited process capabilities (for systems that have them).
-/
-
-static bool set_inherited_process_capability( uint32_t cap_flag, bool enable )
-{
-   if(cap_flag == KERNEL_OPLOCK_CAPABILITY) {
-   cap_t cap = cap_get_proc();
-
-   if (cap == NULL) {
-   DEBUG(0,("set_inherited_process_capability: 
cap_get_proc failed. Error was %s\n",
-   strerror(errno)));
-   return false;
-   }
-
-   if(enable)
-   cap->cap_inheritable |= CAP_NETWORK_MGT;
-   else
-   cap->cap_inheritable &= ~CAP_NETWORK_MGT;
-
-   if (cap_set_proc(cap) == -1) {
-   DEBUG(0,("set_inherited_process_capability: 
cap_set_proc failed. Error was %s\n", 
-   strerror(errno)));
-   cap_free(cap);
-   return false;
-   }
-
-   cap_free(cap);
-
-   DEBUG(10,("set_inherited_process_capability: Set 
KERNEL_OPLOCK_CAPABILITY.\n"));
-   }
-   return true;
-}
-#endif


-- 
Samba Shared Repository

[SCM] Samba Shared Repository - branch v4-0-test updated

2013-10-08 Thread Karolin Seeger 
The branch, v4-0-test has been updated
   via  acf4fe4 doc: Update documentation of pam_winbind krb5 support.
   via  11a4a64 s3-winbind: Add support for the kernel krb5 keyring buffer.
   via  f91b6c9 s3-winbind: Don't set a default directory for DIR.
  from  5b0caf4 VERSION: Bump version number up to 4.0.11...

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -
commit acf4fe4084eb7e8715bc8ebc18ddf02b05b1ef57
Author: Andreas Schneider 
Date:   Tue Sep 10 09:43:32 2013 +0200

doc: Update documentation of pam_winbind krb5 support.

Signed-off-by: Andreas Schneider 
Reviewed-by: Guenther Deschner 

Autobuild-User(master): Günther Deschner 
Autobuild-Date(master): Tue Sep 10 15:35:20 CEST 2013 on sn-devel-104

The last 3 patches address bug #10132 - pam_winbindd should support the 
KEYRING
ccache type.

Autobuild-User(v4-1-test): Karolin Seeger 
Autobuild-Date(v4-1-test): Mon Oct  7 12:21:29 CEST 2013 on sn-devel-104
(cherry picked from commit 82d6a4354d3b4a6cc9e70ccfb21d7b604bed179b)

Autobuild-User(v4-0-test): Karolin Seeger 
Autobuild-Date(v4-0-test): Tue Oct  8 13:32:27 CEST 2013 on sn-devel-104

commit 11a4a6474589fc5d3fccd8a645281323f7d252d1
Author: Andreas Schneider 
Date:   Tue Sep 10 09:30:04 2013 +0200

s3-winbind: Add support for the kernel krb5 keyring buffer.

Signed-off-by: Andreas Schneider 
Reviewed-by: Guenther Deschner 
(cherry picked from commit 5a55cb636fa50e96000ea6a00960cc34e00e26a1)

commit f91b6c995e322da9d359437bd114b751ba73a67c
Author: Andreas Schneider 
Date:   Tue Sep 10 09:28:50 2013 +0200

s3-winbind: Don't set a default directory for DIR.

There is not default so you should always have to specify a directory in
the config file.

Signed-off-by: Andreas Schneider 
Reviewed-by: Guenther Deschner 
(cherry picked from commit 58038f6b26b5363f07d6e4a3fac6db461f9bca2c)

---

Summary of changes:
 docs-xml/manpages/pam_winbind.conf.5.xml |   26 +-
 source3/winbindd/winbindd_pam.c  |4 ++--
 2 files changed, 19 insertions(+), 11 deletions(-)


Changeset truncated at 500 lines:

diff --git a/docs-xml/manpages/pam_winbind.conf.5.xml 
b/docs-xml/manpages/pam_winbind.conf.5.xml
index be7f684..725e809 100644
--- a/docs-xml/manpages/pam_winbind.conf.5.xml
+++ b/docs-xml/manpages/pam_winbind.conf.5.xml
@@ -106,16 +106,24 @@
krb5_ccache_type = [type]

 
-   When pam_winbind is configured to try kerberos authentication by
-   enabling the krb5_auth option, it can
-   store the retrieved Ticket Granting Ticket (TGT) in a credential
-   cache. The type of credential cache can be controlled with this
-   option.  The supported values are: FILE
-   and DIR (when the DIR type is supported
-   by the system's Kerberos library). In case of FILE a credential
+   When pam_winbind is configured to try kerberos authentication
+   by enabling the krb5_auth option, it can
+   store the retrieved Ticket Granting Ticket (TGT) in a
+   credential cache. The type of credential cache can be
+   controlled with this option.  The supported values are:
+   KEYRING (when supported by the system's
+   Kerberos library and Kernel), FILE and
+   DIR (when the DIR type is supported by
+   the system's Kerberos library). In case of FILE a credential
cache in the form of /tmp/krb5cc_UID will be created -  in case
-   of DIR it will be located under the /run/user/UID/krb5cc
-   directory.  UID is replaced with the numeric user id.
+   of DIR you NEED to specify a directory. UID is replaced with
+   the numeric user id.
+
+   When using the KEYRING type, the supported mechanism is
+   KEYRING:persistent:UID, which uses the Linux
+   kernel keyring to store credentials on a per-UID basis. This is
+   the recommended choice on latest Linux distributions, as it is
+   the most secure and predictable method.
 
It is also possible to define custom filepaths and use 
the "%u"
pattern in order to substitue the numeric user id.
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 6fbad72..8f2facd 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -492,9 +492,9 @@ static const char *generate_krb5_ccache(TALLOC_CTX *mem_ctx,
gen_cc = talloc_asprintf(
mem_ctx, "WRFILE:/tmp/krb5cc_%d", uid);
}
-   if (s

[SCM] Samba Website Repository - branch master updated

2013-10-08 Thread Karolin Seeger 
The branch, master has been updated
   via  349f391 Update latest stable release.
  from  8dc0c18 Announce Samba 4.0.10.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 349f391582b88ac135776cb6b7af6f25ce36b07e
Author: Karolin Seeger 
Date:   Tue Oct 8 10:40:09 2013 +0200

Update latest stable release.

And fix German umlaut.

Signed-off-by: Karolin Seeger 

---

Summary of changes:
 history/samba-4.0.10.html  |2 +-
 latest_stable_release.html |6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)


Changeset truncated at 500 lines:

diff --git a/history/samba-4.0.10.html b/history/samba-4.0.10.html
index c3d9b86..35ff898 100755
--- a/history/samba-4.0.10.html
+++ b/history/samba-4.0.10.html
@@ -64,7 +64,7 @@ o   Andrew Bartlett 
   role transfer.
 
 
-o   Günther Deschner 
+o   Günther Deschner 
 * BUG 9615: s3-winbindd: fix fallback to ncacn_np in cm_connect_lsat().
 * BUG 9899: s3-winbindd: fix fallback to ncacn_np in cm_connect_lsat().
 * BUG 10147: Better document potential implications of a globally used
diff --git a/latest_stable_release.html b/latest_stable_release.html
index 9ba448d..bdf5473 100644
--- a/latest_stable_release.html
+++ b/latest_stable_release.html
@@ -1,5 +1,5 @@
 
-   Samba 4.0.9 
(gzipped)
-   Release Notes ·
-   Signature
+   Samba 4.0.10 
(gzipped)
+   Release Notes ·
+   Signature
 


-- 
Samba Website Repository

[SCM] Samba Website Repository - branch master updated

2013-10-08 Thread Karolin Seeger 
The branch, master has been updated
   via  8dc0c18 Announce Samba 4.0.10.
  from  45ca9c6 Announce Samba 4.1.0rc4.

http://gitweb.samba.org/?p=samba-web.git;a=shortlog;h=master


- Log -
commit 8dc0c18e4070771b1409f711226fcf114bb06129
Author: Karolin Seeger 
Date:   Tue Oct 8 10:29:34 2013 +0200

Announce Samba 4.0.10.

Signed-off-by: Karolin Seeger 

---

Summary of changes:
 generated_news/latest_10_bodies.html|   26 +++---
 generated_news/latest_10_headlines.html |4 +-
 generated_news/latest_2_bodies.html |   25 +++---
 history/header_history.html |1 +
 history/samba-4.0.10.html   |  124 +++
 5 files changed, 152 insertions(+), 28 deletions(-)
 create mode 100755 history/samba-4.0.10.html


Changeset truncated at 500 lines:

diff --git a/generated_news/latest_10_bodies.html 
b/generated_news/latest_10_bodies.html
index 8852f09..d58a94d 100644
--- a/generated_news/latest_10_bodies.html
+++ b/generated_news/latest_10_bodies.html
@@ -1,3 +1,16 @@
+   08 October 2013
+   Samba 4.0.10 Available for Download
+   This is the latest stable release of the Samba 4.0 series.
+
+The uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+http://samba.org/samba/ftp/stable/samba-4.0.10.tar.gz";>downloaded
+now. A http://samba.org/samba/ftp/patches/patch-4.0.9-4.0.10.diffs.gz";>
+patch against Samba 4.0.9 is also available. See
+http://samba.org/samba/history/samba-4.0.10.html";> the release notes
+ for more info.
+
+
27 September 2013
Samba 4.1.0rc4 Available for Download
This is the fourth release candidate of the upcoming Samba 4.1 
release series.
@@ -136,16 +149,3 @@ now. A http://samba.org/samba/ftp/patches/patch-4.0.6-4.0.7.diffs.g
 patch against Samba 4.0.6 is also available. See
 http://samba.org/samba/history/samba-4.0.7.html";> the release notes
  for more info.
-
-
-   19 June 2013
-   Samba 3.6.16 Available for Download
-   This is the latest stable release of the Samba 3.6 series.
-
-The uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA).  The source code can be
-http://samba.org/samba/ftp/stable/samba-3.6.16.tar.gz";>downloaded
-now. A http://samba.org/samba/ftp/patches/patch-3.6.15-3.6.16.diffs.gz";>
-patch against Samba 3.6.15 is also available.
-See http://samba.org/samba/history/samba-3.6.16.html";>
-the release notes for more info.
diff --git a/generated_news/latest_10_headlines.html 
b/generated_news/latest_10_headlines.html
index 3845e1c..74858e9 100644
--- a/generated_news/latest_10_headlines.html
+++ b/generated_news/latest_10_headlines.html
@@ -1,4 +1,6 @@
 
+08 October 2013 Samba 4.0.10 Available for 
Download
+
 27 September 2013 Samba 4.1.0rc4 Available for
Download
 
@@ -21,6 +23,4 @@
Download
 
 02 July 2013 Samba 4.0.7 Available for 
Download
-
-19 June 2013 Samba 3.6.16 Available for 
Download
 
diff --git a/generated_news/latest_2_bodies.html 
b/generated_news/latest_2_bodies.html
index 5c2c3ef..ee3f004 100644
--- a/generated_news/latest_2_bodies.html
+++ b/generated_news/latest_2_bodies.html
@@ -1,3 +1,15 @@
+   08 October 2013
+   Samba 4.0.10 Available for Download
+   This is the latest stable release of the Samba 4.0 series.
+
+The uncompressed tarballs and patch files have been signed
+using GnuPG (ID 6568B7EA).  The source code can be
+http://samba.org/samba/ftp/stable/samba-4.0.10.tar.gz";>downloaded
+now. A http://samba.org/samba/ftp/patches/patch-4.0.9-4.0.10.diffs.gz";>
+patch against Samba 4.0.9 is also available. See
+http://samba.org/samba/history/samba-4.0.10.html";> the release notes
+ for more info.
+
27 September 2013
Samba 4.1.0rc4 Available for Download
This is the fourth release candidate of the upcoming Samba 4.1 
release series.
@@ -7,16 +19,3 @@ using GnuPG (ID 6568B7EA).  The source code can be
 https://download.samba.org/pub/samba/rc/samba-4.1.0rc4.tar.gz";>downloaded
 now. See https://download.samba.org/pub/samba/rc/WHATSNEW-4.1.0rc4.txt";>the
 release notes for more info.
-
-
-   25 September 2013
-   Samba 3.6.19 Available for Download
-   This is the latest stable release of the Samba 3.6 series.
-
-The uncompressed tarballs and patch files have been signed
-using GnuPG (ID 6568B7EA).  The source code can be
-http://samba.org/samba/ftp/stable/samba-3.6.19.tar.gz";>downloaded
-now. A http://samba.org/samba/ftp/patches/patch-3.6.18-3.6.19.diffs.gz";>
-patch against Samba 3.6.18 is also available.
-See http://samba.org/samba/history/samba-3.6.19.html";>
-the release notes for more info.
diff --git a/history/header_history.html b/history/header_history.html
index c1fb48e..a233c3c 100755
--- a/history/header_history.html

[SCM] Samba Shared Repository - annotated tag samba-4.0.10 created

2013-10-08 Thread Karolin Seeger 
The annotated tag, samba-4.0.10 has been created
at  ce6fd6375224a1bfd949f2097f9c489592249998 (tag)
   tagging  55c51b864a32d7b66240b4a9fb9162906861b1d7 (commit)
  replaces  samba-4.0.9
 tagged by  Karolin Seeger
on  Mon Oct 7 10:51:51 2013 +0200

- Log -
samba: tag release samba-4.0.10
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQBSUnYnbzORW2Vot+oRAsCFAJ9gq/oMPPlg1OK7Ixnjq0oxaXVWPgCgjaNr
6foFPWWMD4ZrfwDhIdKan9M=
=OlD8
-END PGP SIGNATURE-

Amitay Isaacs (2):
  samba-tool/dns: Set secure zone update flag after creating new zone
  samba-tool/dns: Pass on additional flags when creating zones

Andrew Bartlett (9):
  selftest: Fix specification of --machinepass to actually set a unique 
password
  scripting/join.py: Handle creating the dns-NAME account during a DC join
  scripting/samba_upgradedns: Tighten up exception and attribute list 
handling
  selftest: Test creation of the dns-SERVER account during selftest
  selftest: Start internal DNS server on domain provisioned for BIND9_DLZ
  selftest: Add a basic test of samba_upgradedns
  torture: Ensure that GSSAPI and SPNEGO packets are accepted by dlz_bind9
  python-samba-tool fsmo: Do not give an error on a successful role transfer
  dsdb: Convert the full string from UTF16 to UTF8, including embedded NULLs

Christian Ambach (5):
  s3:lib/system fix build on AIX 7
  waf: fix build on AIX7
  waf: add --without-gettext option
  waf: consolidate libintl related checks
  waf: replace dependency to libintl with samba_intl

Christof Schmitt (1):
  s3:smb2_find: Return that timestamps do not exist as directories

Daniel Liberman (1):
  Fix bug 10162 - POSIX ACL mapping failing when setting DENY ACE's from 
Windows.

Günther Deschner (2):
  s3-winbindd: fix fallback to ncacn_np in cm_connect_lsat().
  docs: point out side-effects of global "valid users" setting.

Jeremy Allison (11):
  Fix bug #10063 - source3/lib/util.c:1493 leaking memory w/ pam_winbind.so 
/ winbind
  Fix bug #9166 - Starting smbd or nmbd with stdin from /dev/null results 
in "EOF on stdin"
  Fix the erroneous masking of chmod requests via the UNIX extensions.
  Allow UNIX extensions client to act on open fsp instead of pathname if 
available.
  Fix the UNIX extensions CHOWN calls to use FCHOWN if available, else 
LCHOWN.
  dsgetdcname_cache_fetch() doesn't use the site_name parameter so don't 
pass it.
  Refactor dsgetdcname to be called via a wrapper function.
  Move the manipulation of site_name into the caller function dsgetdcname().
  Move the retry logic when site_name is passed in a NULL or "" to the 
wrapper function.
  Optimization. Don't do the retry logic if sitename_fetch() returned NULL, 
we already did a NULL query.
  Fix is_legal_name() to not emit character conversion error messages.

Karolin Seeger (8):
  VERSION: Bump version number up to 4.0.10...
  docs: Fix variable list in man vfs_crossrename.
  docs: Fix typos.
  WHATSNEW: Satrt release notes for Samba 4.0.10.
  WHATSNEW: Add hint on the new "acl allow execute always" parameter.
  WHATSNEW: Add latest changes since 4.0.9.
  WHATSNEW: Update release date.
  VERSION: Disable git snapshots for the 4.0.10 release.

Korobkin (1):
  Raise the level of a debug.

Matthieu Patou (1):
  libcli: continue to read from the socket even if the size is 0

Michael Adam (4):
  loadparm: add new parameter "acl allow execute always"
  s3:smbd: ease file server upgrades from 3.6 and earlier with "acl allow 
execute aways"
  docs: document "acl allow execute always"
  s3:smbd:smb2:scavenger: fix format error for debugging open_persistent_id 
in scavenger_timer()

Ralph Wuerthner (5):
  s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo in case 
output_buffer_length is too small
  s3:smbd: allow GetInfo responses with STATUS_BUFFER_OVERFLOW to return 
partial, but valid data
  s3:smbd: allow status code in smbd_do_qfsinfo() to be set by information 
class handler
  s3:smbd: allow info class SMB_QUERY_FS_VOLUME_INFO to return partial data
  s3:smbd: allow info class SMB_QUERY_FS_ATTRIBUTE_INFO to return partial 
data

Richard Sharpe (1):
  Fix bug #10097 - MacOSX 10.9 will not follow path-based DFS referrals 
handed out by Samba.

Stefan Metzmacher (4):
  python/pyglue: filter out loopback and linklocal addresses unless 
all_interfaces is given
  s4:samba_upgradedns: don't pass linklocal=False to interface_ips_v6()
  python/provision: remove unused linklocal=False argument from 
interface_ips_v6()
  s3:lib/gencache: place gencache.tdb into /var/cache/samba

Volker Lendecke (18):
  smbd: Fix async echo handler forking (Bug 10086)
  smbd: Fix a profile problem
  smbd: Simplify dropbox special case in u

[SCM] Samba Shared Repository - branch v4-0-stable updated

2013-10-08 Thread Karolin Seeger 
The branch, v4-0-stable has been updated
   via  55c51b8 VERSION: Disable git snapshots for the 4.0.10 release.
   via  6b120a5 WHATSNEW: Update release date.
   via  825aadb WHATSNEW: Add latest changes since 4.0.9.
   via  8303c26 smbd: Fix crash bug in notify_deferred_opens
   via  76952d4 torture3: Trigger a nasty cleanup bug in smbd
   via  73166e5 smbd: Fix flawed share_mode_stale_pid API
   via  65c8909 smbd: Rename parameter "i" to "idx"
   via  e3e0f59 smbd: Don't store in-memory only flags in locking.tdb
   via  a321024 smbd: Simplify find_oplock_types
   via  c02af3e WHATSNEW: Add hint on the new "acl allow execute always" 
parameter.
   via  5f3c623 WHATSNEW: Satrt release notes for Samba 4.0.10.
   via  ac049b9 dsdb: Convert the full string from UTF16 to UTF8, including 
embedded NULLs
   via  51822a5 s3:smbd:smb2:scavenger: fix format error for debugging 
open_persistent_id in scavenger_timer()
   via  22b48b3 python-samba-tool fsmo: Do not give an error on a 
successful role transfer
   via  fffa771 Fix bug 10162 - POSIX ACL mapping failing when setting DENY 
ACE's from Windows.
   via  c62c56c docs: point out side-effects of global "valid users" 
setting.
   via  43e5b94 libcli: continue to read from the socket even if the size 
is 0
   via  f7a9cb0 Fix is_legal_name() to not emit character conversion error 
messages.
   via  5f3fa21 s3:smb2_find: Return that timestamps do not exist as 
directories
   via  71e2a9a docs: Fix typos.
   via  56fb38c Raise the level of a debug.
   via  4dd30fa docs: document "acl allow execute always"
   via  4101896 s3:smbd: ease file server upgrades from 3.6 and earlier 
with "acl allow execute aways"
   via  13be13f loadparm: add new parameter "acl allow execute always"
   via  dab5a79 samba-tool/dns: Pass on additional flags when creating zones
   via  e4e9464 samba-tool/dns: Set secure zone update flag after creating 
new zone
   via  f9c157c Optimization. Don't do the retry logic if sitename_fetch() 
returned NULL, we already did a NULL query.
   via  70be15b Move the retry logic when site_name is passed in a NULL or 
"" to the wrapper function.
   via  9930f28 Move the manipulation of site_name into the caller function 
dsgetdcname().
   via  6ddc9a5 Refactor dsgetdcname to be called via a wrapper function.
   via  8943d97 dsgetdcname_cache_fetch() doesn't use the site_name 
parameter so don't pass it.
   via  e0beb5a smbd: Correctly return INFO_LENGTH_MISMATCH for smb1
   via  df9fd7f smbd: Fix error return for STREAM_INFO
   via  d594876 smbd: Revert a93f9c3
   via  aadd02d smbd: Correctly return BUFFER_OVERFLOW in smb2_getinfo
   via  cedcde9 smbd: Correctly return INFO_LENGTH_MISMATCH in smb2_getinfo
   via  ef717ef smbd: qfsinfo has fixed/variable buffers
   via  4220369 smbd: qfilepathinfo has fixed/variable buffers
   via  12c77c7 smbd: Use #defines in smb2_getinfo_send
   via  6dc2f7f s3:smbd: allow info class SMB_QUERY_FS_ATTRIBUTE_INFO to 
return partial data
   via  cc100f0 s3:smbd: allow info class SMB_QUERY_FS_VOLUME_INFO to 
return partial data
   via  235342b s3:smbd: allow status code in smbd_do_qfsinfo() to be set 
by information class handler
   via  2c608aa s3:smbd: allow GetInfo responses with 
STATUS_BUFFER_OVERFLOW to return partial, but valid data
   via  71c00f1 s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo 
in case output_buffer_length is too small
   via  067ce71 torture: Ensure that GSSAPI and SPNEGO packets are accepted 
by dlz_bind9
   via  cf1ae22 selftest: Add a basic test of samba_upgradedns
   via  8424ea2 selftest: Start internal DNS server on domain provisioned 
for BIND9_DLZ
   via  e94d37c selftest: Test creation of the dns-SERVER account during 
selftest
   via  8e618de scripting/samba_upgradedns: Tighten up exception and 
attribute list handling
   via  d17713f scripting/join.py: Handle creating the dns-NAME account 
during a DC join
   via  6bed1b2 selftest: Fix specification of --machinepass to actually 
set a unique password
   via  8749a30 s3:lib/gencache: place gencache.tdb into /var/cache/samba
   via  825d273 python/provision: remove unused linklocal=False argument 
from interface_ips_v6()
   via  1cfb0ae s4:samba_upgradedns: don't pass linklocal=False to 
interface_ips_v6()
   via  ad2dc0f python/pyglue: filter out loopback and linklocal addresses 
unless all_interfaces is given
   via  25ded36 Fix the UNIX extensions CHOWN calls to use FCHOWN if 
available, else LCHOWN.
   via  ac3c32d Allow UNIX extensions client to act on open fsp instead of 
pathname if available.
   via  335e417 Fix the erroneous masking of chmod requests via the UNIX 
extensions.
   via  9891d98 Fix bug #9166 - Starting smbd or nmbd with stdin from 
/dev/null results in "EOF on stdin"