autobuild[sn-devel-144]: intermittent test failure detected

2016-01-22 Thread autobuild
The autobuild test system (on sn-devel-144) has detected an intermittent 
failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-1609/flakey.log

The samba build logs are available here:

   
http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-1609/samba.stderr
   
http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-1609/samba.stdout
  
The top commit at the time of the failure was:

commit f69b6dd9053fe763235d0453a00c9363491bce32
Author: Andreas Schneider 
Date:   Thu Jan 14 10:32:57 2016 +0100

tests: Only execute heimdal tests if we build with heimdal

This is a preparation for MIT Kerberos support in the AD server.

Pair-Programmed-With: Alexander Bokovoy 
Signed-off-by: Andreas Schneider 
Signed-off-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 22 14:13:42 CET 2016 on sn-devel-144



autobuild[sn-devel-144]: intermittent test failure detected

2016-01-22 Thread autobuild
The autobuild test system (on sn-devel-144) has detected an intermittent 
failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-2145/flakey.log

The samba build logs are available here:

   
http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-2145/samba.stderr
   
http://git.samba.org/autobuild.flakey.sn-devel-144/2016-01-22-2145/samba.stdout
  
The top commit at the time of the failure was:

commit f69b6dd9053fe763235d0453a00c9363491bce32
Author: Andreas Schneider 
Date:   Thu Jan 14 10:32:57 2016 +0100

tests: Only execute heimdal tests if we build with heimdal

This is a preparation for MIT Kerberos support in the AD server.

Pair-Programmed-With: Alexander Bokovoy 
Signed-off-by: Andreas Schneider 
Signed-off-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 22 14:13:42 CET 2016 on sn-devel-144



[SCM] Samba Shared Repository - branch master updated

2016-01-22 Thread Ralph Böhme
The branch, master has been updated
   via  b74bef8 smbstatus: add support for SMB1 signing and CIFS UNIX 
extensions encryption
   via  f955499 libcli/smb: add define SMB_ENCRYPTION_GSSAPI for CIFS 
encryption type
   via  1e60a3f smbstatus: show signing state of sessions and tcons
   via  8d8af47 s3:lib/conn_tdb: store the connection dialect
   via  9d28443 s3:smb2_server: add signing state tracking flags
   via  fe5353c s3:smb2_server: convert signing_required bool to flags 
bitmap
   via  780743d smbstatus: show encrpytion state of tree connects
   via  83a557d smbstatus: align tree connect header and output
   via  e0fc931 smbstatus: show encrpytion state of sessions
   via  5d75078 smbstatus: align session list header and ouput
   via  603f1de smbstatus: pass talloc context to traverse_connections
   via  c2443d6 smbstatus: pass talloc context to traverse_sessionid
   via  f59ef03 smbstatus: rework connection dialect printing
   via  e501c73 s3:smb2_server: add encryption state tracking flags
   via  736cd36 s3:smb2_server: store encryption cipher in the channel
   via  bfdffea s3:smb2_server: convert encryption desired and required 
bools to flags
   via  63a13f4 smbstatus: remove obsolete verbose message
  from  ef269c9 substitute: Fix talloc_sub_basic for %G in the case of a 
local user.

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit b74bef8f7d3452f9a5aee4c934c9ff62afc2b2bd
Author: Ralph Boehme 
Date:   Mon Nov 30 17:03:26 2015 +0100

smbstatus: add support for SMB1 signing and CIFS UNIX extensions encryption

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Ralph Böhme 
Autobuild-Date(master): Fri Jan 22 11:06:05 CET 2016 on sn-devel-144

commit f95549957ec73a67bee0093a17e84808adfe97de
Author: Ralph Boehme 
Date:   Thu Dec 3 12:17:50 2015 +0100

libcli/smb: add define SMB_ENCRYPTION_GSSAPI for CIFS encryption type

Add a define for the CIFS UNIX extensions encryption type. We store this
in smbXsrv_channel and use it in smbstatus for showing the
CIFS/SMB2/SMB3 encryption cipher used.

The SMB3 encryption cipher constants start at 1, carefully choosing the
highest available bit for the CIFS UNIX extensions encryption cipher
should avoid collisions and leaves room for many SMB3 ciphers in the
future.

Signed-off-by: Ralph Boehme 
Reviewed-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit 1e60a3f009649df4b22ce09828a9f3c82848cee0
Author: Ralph Boehme 
Date:   Mon Nov 30 11:20:43 2015 +0100

smbstatus: show signing state of sessions and tcons

Show the signing state of sesssions tcons in smbstatus. This is SMB2/3
only. SMB1 support will be added in a later commit.

Signed-off-by: Ralph Boehme 
Reviewed-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit 8d8af479e22f3a8b394c72d36a49715cd5de6ca0
Author: Ralph Boehme 
Date:   Mon Nov 30 11:14:34 2015 +0100

s3:lib/conn_tdb: store the connection dialect

This will be used in a subsequent commit that will print the signing
cipher in smbstatus. We need the connection dialect for that.

Signed-off-by: Ralph Boehme 
Reviewed-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit 9d284431fc478bc6e19ac2d98b3c330800521ad3
Author: Ralph Boehme 
Date:   Sun Nov 15 11:12:34 2015 +0100

s3:smb2_server: add signing state tracking flags

Add flags that track the signing state of all incoming and outgoing SMB2
packets and a helper function that can be used to determine whether a
session of tcon can be considered "signed".

Signed-off-by: Ralph Boehme 
Reviewed-by: Jeremy Allison 

commit fe5353c82ee41ef620aa8340acd4748dd3bc795f
Author: Ralph Boehme 
Date:   Sun Nov 15 10:49:38 2015 +0100

s3:smb2_server: convert signing_required bool to flags bitmap

Use a flags bitmap for storing the signing state. This is in preparation
of a subsequent patch that adds more flags to the bitmap.

Signed-off-by: Ralph Boehme 
Reviewed-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

commit 780743d1b28d92352fa91322f9a14dc86055ea08
Author: Ralph Boehme 
Date:   Mon Nov 9 17:26:51 2015 +0100

smbstatus: show encrpytion state of tree connects

Show the encrpytion state of tcons in smbstatus. This is SMB3 only. CIFS
UNIX extensions encryption will be added in a later commit.

 

[SCM] Samba Shared Repository - branch master updated

2016-01-22 Thread Uri Simchoni
The branch, master has been updated
   via  3e08469 build: fix ldbsearch panic on FC22
  from  8ec92e5 smbspool: Add string representation of nt_status

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit 3e084695daff377da6f6e4a6fcb10c05f2a6dd03
Author: Uri Simchoni 
Date:   Thu Jan 21 11:14:36 2016 +0200

build: fix ldbsearch panic on FC22

add dependency that fixes ldbsearch panic due to conflict -
function read_data() is implemented both by libtspi.so.1, which
is a dependency of gnutls on FC22, and by an internal samba
shared lib.

Signed-off-by: Uri Simchoni 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Uri Simchoni 
Autobuild-Date(master): Sat Jan 23 00:06:59 CET 2016 on sn-devel-144

---

Summary of changes:
 source4/dsdb/samdb/ldb_modules/wscript_build_server | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


Changeset truncated at 500 lines:

diff --git a/source4/dsdb/samdb/ldb_modules/wscript_build_server 
b/source4/dsdb/samdb/ldb_modules/wscript_build_server
index b54d27f..8fa9939 100755
--- a/source4/dsdb/samdb/ldb_modules/wscript_build_server
+++ b/source4/dsdb/samdb/ldb_modules/wscript_build_server
@@ -325,7 +325,7 @@ bld.SAMBA_MODULE('ldb_acl',
init_function='ldb_acl_module_init',
module_init_name='ldb_init_module',
internal_module=False,
-   deps='talloc samba-security samdb DSDB_MODULE_HELPERS krb5samba'
+   deps='talloc samba-util samba-security samdb DSDB_MODULE_HELPERS 
krb5samba'
)
 
 


-- 
Samba Shared Repository



autobuild[sn-devel-104]: intermittent test failure detected

2016-01-22 Thread autobuild
The autobuild test system (on sn-devel-104) has detected an intermittent 
failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-22-1809/flakey.log

The samba build logs are available here:

   
http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-22-1809/samba.stderr
   
http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-22-1809/samba.stdout
  
The top commit at the time of the failure was:

commit f69b6dd9053fe763235d0453a00c9363491bce32
Author: Andreas Schneider 
Date:   Thu Jan 14 10:32:57 2016 +0100

tests: Only execute heimdal tests if we build with heimdal

This is a preparation for MIT Kerberos support in the AD server.

Pair-Programmed-With: Alexander Bokovoy 
Signed-off-by: Andreas Schneider 
Signed-off-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 22 14:13:42 CET 2016 on sn-devel-144



[SCM] Samba Shared Repository - branch master updated

2016-01-22 Thread Andreas Schneider
The branch, master has been updated
   via  f69b6dd tests: Only execute heimdal tests if we build with heimdal
   via  30419f2 tests: Rename heimdal blackbox tests
  from  b74bef8 smbstatus: add support for SMB1 signing and CIFS UNIX 
extensions encryption

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit f69b6dd9053fe763235d0453a00c9363491bce32
Author: Andreas Schneider 
Date:   Thu Jan 14 10:32:57 2016 +0100

tests: Only execute heimdal tests if we build with heimdal

This is a preparation for MIT Kerberos support in the AD server.

Pair-Programmed-With: Alexander Bokovoy 
Signed-off-by: Andreas Schneider 
Signed-off-by: Alexander Bokovoy 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 22 14:13:42 CET 2016 on sn-devel-144

commit 30419f296602ca37eeb3cd9ca8e97c14527c0c3c
Author: Andreas Schneider 
Date:   Thu Jan 14 10:32:11 2016 +0100

tests: Rename heimdal blackbox tests

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy 

---

Summary of changes:
 source4/selftest/tests.py  | 26 +++---
 .../{test_kinit.sh => test_kinit_heimdal.sh}   |  2 +-
 ...init_trusts.sh => test_kinit_trusts_heimdal.sh} |  0
 .../{test_pkinit.sh => test_pkinit_heimdal.sh} |  0
 4 files changed, 19 insertions(+), 9 deletions(-)
 rename testprogs/blackbox/{test_kinit.sh => test_kinit_heimdal.sh} (99%)
 rename testprogs/blackbox/{test_kinit_trusts.sh => 
test_kinit_trusts_heimdal.sh} (100%)
 rename testprogs/blackbox/{test_pkinit.sh => test_pkinit_heimdal.sh} (100%)


Changeset truncated at 500 lines:

diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
index 8586531..6160152 100755
--- a/source4/selftest/tests.py
+++ b/source4/selftest/tests.py
@@ -52,13 +52,20 @@ try:
 except KeyError:
 config_h = os.path.join(samba4bindir, "default/include/config.h")
 
-# see if we support ldaps
+# check available features
+config_hash = dict()
 f = open(config_h, 'r')
 try:
-have_tls_support = ("ENABLE_GNUTLS 1" in f.read())
+lines = f.readlines()
+config_hash = dict((x[0], ' '.join(x[1:]))
+for x in map(lambda line: line.strip().split(' ')[1:],
+ filter(lambda line: (line[0:7] == '#define') and 
(len(line.split(' ')) > 2), lines)))
 finally:
 f.close()
 
+have_tls_support = ("ENABLE_GNUTLS" in config_hash)
+have_heimdal_support = ("SAMBA4_USES_HEIMDAL" in config_hash)
+
 if have_tls_support:
 for options in ['-U"$USERNAME%$PASSWORD"']:
 plantestsuite("samba4.ldb.ldaps with options %s(ad_dc_ntvfs)" % 
options, "ad_dc_ntvfs",
@@ -311,12 +318,15 @@ for env in ["ad_member", "s4member", "ad_dc_ntvfs", 
"chgdcpass"]:
 plantestsuite("samba4.blackbox.smbclient(%s:local)" % env, "%s:local" % 
env, [os.path.join(samba4srcdir, "utils/tests/test_smbclient.sh"), '$SERVER', 
'$SERVER_IP', '$USERNAME', '$PASSWORD', '$DOMAIN', smbclient4])
 
 plantestsuite("samba4.blackbox.samba_tool(ad_dc_ntvfs:local)", 
"ad_dc_ntvfs:local", [os.path.join(samba4srcdir, 
"utils/tests/test_samba_tool.sh"), '$SERVER', '$SERVER_IP', '$USERNAME', 
'$PASSWORD', '$DOMAIN', smbclient4])
-plantestsuite("samba4.blackbox.pkinit(ad_dc_ntvfs:local)", 
"ad_dc_ntvfs:local", [os.path.join(bbdir, "test_pkinit.sh"), '$SERVER', 
'$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$PREFIX/ad_dc_ntvfs', 
"aes256-cts-hmac-sha1-96", smbclient4, configuration])
-plantestsuite("samba4.blackbox.kinit(ad_dc_ntvfs:local)", "ad_dc_ntvfs:local", 
[os.path.join(bbdir, "test_kinit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', 
'$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4, 
configuration])
-plantestsuite("samba4.blackbox.kinit(fl2000dc:local)", "fl2000dc:local", 
[os.path.join(bbdir, "test_kinit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', 
'$REALM', '$DOMAIN', '$PREFIX', "arcfour-hmac-md5", smbclient4, configuration])
-plantestsuite("samba4.blackbox.kinit(fl2008r2dc:local)", "fl2008r2dc:local", 
[os.path.join(bbdir, "test_kinit.sh"), '$SERVER', '$USERNAME', '$PASSWORD', 
'$REALM', '$DOMAIN', '$PREFIX', "aes256-cts-hmac-sha1-96", smbclient4, 
configuration])
-plantestsuite("samba4.blackbox.kinit_trust(fl2008r2dc:local)", 
"fl2008r2dc:local", [os.path.join(bbdir, "test_kinit_trusts.sh"), '$SERVER', 
'$USERNAME', '$PASSWORD', '$REALM', '$DOMAIN', '$TRUST_SERVER', 
'$TRUST_USERNAME', '$TRUST_PASSWORD', '$TRUST_REALM', '$TRUST_DOMAIN', 
'$PREFIX', "forest", "aes256-cts-hmac-sha1-96"])
-plantestsuite("samba4.blackbox.kinit_trust(fl2003dc:local)", "fl2003dc:local", 
[os.path.join(bbdir, "test_kinit_trusts.sh"), '$SERVER', '$USERNAME', 
'$PASSWORD', '$REALM', '$DOMAIN', 

[SCM] Samba Shared Repository - branch master updated

2016-01-22 Thread Michael Adam
The branch, master has been updated
   via  a1a8746 s3:smb2_sesssetup: implement SMB3 session bind (disabled)
   via  edd781d s3:smb2_sesssetup: treat BINDING in 
smbd_smb2_session_setup_auth_return
   via  91770e3 s3:smb2_negprot: announce multi channel support (disabled)
   via  d60ffcf smbXsrv: introduce bool 
smbXsrv_client->server_multi_channel_enabled
  from  3e08469 build: fix ldbsearch panic on FC22

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -
commit a1a8746174dff0b80ef4620894001a610b78f208
Author: Michael Adam 
Date:   Thu Jan 21 18:59:34 2016 +0100

s3:smb2_sesssetup: implement SMB3 session bind (disabled)

This is disabled for now. It will be possible to enabled it
via a config switch once the underpinnings are complete.

Pair-Programmed-With: Stefan Metzmacher 
Pair-Programmed-With: Guenther Deschner 

Signed-off-by: Michael Adam 
Signed-off-by: Stefan Metzmacher 

Autobuild-User(master): Michael Adam 
Autobuild-Date(master): Sat Jan 23 03:22:18 CET 2016 on sn-devel-144

commit edd781d5a886aab4a5002280321006cfbc2c7bc9
Author: Stefan Metzmacher 
Date:   Wed Jul 29 17:05:52 2015 +0200

s3:smb2_sesssetup: treat BINDING in smbd_smb2_session_setup_auth_return

This adds smbd_smb2_bind_auth_return(), a
variant of auth_return for session binding.

Pair-Programmed-With: Michael Adam 

Signed-off-by: Stefan Metzmacher 
Signed-off-by: Michael Adam 

commit 91770e3fa76d23b522929c09aa5b587a8d9ffd4f
Author: Michael Adam 
Date:   Thu Jan 21 00:16:33 2016 +0100

s3:smb2_negprot: announce multi channel support (disabled)

This disabled for now. Will be enabled by config setting
once underpinnings are ready.

Pair-Programmed-With: Guenther Deschner 

Signed-off-by: Michael Adam 
Signed-off-by: Guenther Deschner 
Reviewed-by: Stefan Metzmacher 

commit d60ffcfe440c17f30be9e97d7049650d988c9395
Author: Michael Adam 
Date:   Fri Jan 22 12:51:15 2016 +0100

smbXsrv: introduce bool smbXsrv_client->server_multi_channel_enabled

defaulting to false.

Signed-off-by: Michael Adam 
Reviewed-by: Stefan Metzmacher 

---

Summary of changes:
 source3/librpc/idl/smbXsrv.idl |   1 +
 source3/smbd/smb2_negprot.c|   8 ++
 source3/smbd/smb2_sesssetup.c  | 205 -
 3 files changed, 211 insertions(+), 3 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/librpc/idl/smbXsrv.idl b/source3/librpc/idl/smbXsrv.idl
index 8528770..5fc3603 100644
--- a/source3/librpc/idl/smbXsrv.idl
+++ b/source3/librpc/idl/smbXsrv.idl
@@ -112,6 +112,7 @@ interface smbXsrv
 * one in future.
 */
[ignore] struct smbXsrv_connection  *connections;
+   boolean8server_multi_channel_enabled;
} smbXsrv_client;
 
/* sessions */
diff --git a/source3/smbd/smb2_negprot.c b/source3/smbd/smb2_negprot.c
index c04fbca..1582072 100644
--- a/source3/smbd/smb2_negprot.c
+++ b/source3/smbd/smb2_negprot.c
@@ -485,6 +485,14 @@ NTSTATUS smbd_smb2_request_process_negprot(struct 
smbd_smb2_request *req)
xconn->smb2.server.cipher = SMB2_ENCRYPTION_AES128_CCM;
}
 
+   if (protocol >= PROTOCOL_SMB2_22 &&
+   xconn->client->server_multi_channel_enabled)
+   {
+   if (in_capabilities & SMB2_CAP_MULTI_CHANNEL) {
+   capabilities |= SMB2_CAP_MULTI_CHANNEL;
+   }
+   }
+
security_offset = SMB2_HDR_BODY + 0x40;
 
 #if 1
diff --git a/source3/smbd/smb2_sesssetup.c b/source3/smbd/smb2_sesssetup.c
index a6c66e2..a95f8a1 100644
--- a/source3/smbd/smb2_sesssetup.c
+++ b/source3/smbd/smb2_sesssetup.c
@@ -554,6 +554,116 @@ static NTSTATUS smbd_smb2_reauth_generic_return(struct 
smbXsrv_session *session,
return NT_STATUS_OK;
 }
 
+static NTSTATUS smbd_smb2_bind_auth_return(struct smbXsrv_session *session,
+  struct smbXsrv_session_auth0 **_auth,
+  struct smbd_smb2_request *smb2req,
+  struct auth_session_info 
*session_info,
+  uint16_t *out_session_flags,
+  uint64_t *out_session_id)
+{
+   NTSTATUS status;
+   struct smbXsrv_session *x = session;
+   struct smbXsrv_session_auth0 *auth = *_auth;
+   struct 

autobuild[sn-devel-104]: intermittent test failure detected

2016-01-22 Thread autobuild
The autobuild test system (on sn-devel-104) has detected an intermittent 
failing test in 
the current master tree.

The autobuild log of the failure is available here:

   http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-23-0215/flakey.log

The samba build logs are available here:

   
http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-23-0215/samba.stderr
   
http://git.samba.org/autobuild.flakey.sn-devel-104/2016-01-23-0215/samba.stdout
  
The top commit at the time of the failure was:

commit 8ec92e50736053a5f4104888e3ad54cdb3e3f54b
Author: Andreas Schneider 
Date:   Tue Jan 12 15:16:43 2016 +0100

smbspool: Add string representation of nt_status

Signed-off-by: Andreas Schneider 
Reviewed-by: Michael Adam 
Reviewed-by: Guenther Deschner 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 22 20:59:36 CET 2016 on sn-devel-144