The annotated tag, samba-4.0.0beta5 has been created at e20618e6ff98277475ad914d96f163885c09bfc4 (tag) tagging 50d6483ab8acd9a2af7558b6831c170a5bce3721 (commit) replaces samba-4.0.0beta4 tagged by Andrew Bartlett on Wed Aug 1 19:40:41 2012 +1000
- Log ----------------------------------------------------------------- samba4: tag release samba-4.0.0beta5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIVAwUAUBj5mWjGT3QfUnJfAQLQzQ/8DIJtrxfcIISnoc8iTyYtVbtUHUJUPR0n a8tjSn575Ea654CjAKPxM6eUOMDSCe1q0dBq7O/yrlKeTp5C5hujs9kIw/LA/1tg SMezdHQNCBeZJVb/WGdLFq722X20JMQoOL4iMVZrhgtf/1j3upqECL4jXCvTXgjZ SJB9FL/emA59MzSZmFXCNdCPfPKNnKMQfw6dm7j375H3lL3HwxkbK6HejEYI6FhN wv32fjB/V6ycSLMAlF8BzPx8sIBIKe3DKaPacGQ8VR6oZJud0zux1JUnIXS3nELi sdcWhGr+ES9dxxsgt52jvRbb67QB1EXrhUVuG+lTL147b+DXurZqr0CCS3/gsD6H AFzKPkoESaJA54ClZedtTAKtBr03b3ltI9yokrJqv2VAOwneSKdc/c0Yh6BL081e MQV0kj7oEc6GXgAFiNvVLAceNVu387Vx9jTx+5C06H2IhCvi1an0yCl/qzLYVKsJ rGGd/01NPcNKh8kPiDcCPaCDmCqw2iQ+JGM7akHIUFdy/FXXUcCX1NGXV35ofPOf 74f0xCxjZHWzvISkpaDBrrqXECzH1HIhCLlanXp9u4eAYQwRpfw72GekSCCpfzRV eAdrXVBe5E4F8of9pbUAm05nYFBkMiTWdfzbYUAacQyXjsBUcs69pjg2/lPB8VvT KqjBoYWJuAw= =FmB6 -----END PGP SIGNATURE----- Alexander Werth (1): s3:Really ignore unknown special ids in NFSv4 ACLs. Andreas Schneider (8): s4-torture: Add DCERPC_SCHANNEL_AES tests. s4-torture: Improve samlogon test. s4-librpc: Add capabilities check for AES encrypted connections. s4-auth: Make sure we use the correct credential state. s3-rpc_client: Add capabilities check for AES encrypted connections. s3-rpc_client: Fix updating netlogon credentials. Enable AES in winbind. s3-winbind: Fix bug #9052 resolving our own "Domain Local" groups. Andrew Bartlett (92): VERSION: Move on to beta5! s4-dsdb: Ensure we never write read-only objects onto a read-write replica s4-dsdb: Allow dbcheck to correct an incorrect instanceType dsdb: Allocate new OID to allow updates of a read-only replica s4-dbcheck: Check for and correct incorrect instanceType values s4-librpc: Ensure we do not call call the decrpc timeout handler during gensec_update() s4-lib/tls: Try socket_send() multiple times to send partial packets s4-torture: Also print GID values in whoami test s4-torture: Allow unix.whoami to test against a member server s4-torture: Move check of map-to-guest above SID list check Revert "s3:auth make sure the primary group sid is usable" selftest: Run unix.whomai against the machine acccount as well auth/credentials: Remove extra newline s3-rpc_server: Remove make_server_info_info3() call from make_server_pipes_struct() s3-auth Use correct RID for domain guests primary group lib/param: bring lp_time_server() into common lib/param: Add my copyright s4-param: Remove unused "idmap trusted only" s3-param: Make lp_name_resolve_order() return a list lib/param: bring lp_smb_ports() into common by making it a list everywhere s3-param: Remove special case for lp_ctdbd_socket(), set CTDB_PATH as default build: Add -Werror=address to the developer build param: Make the 'unicode' parameter common param: Make internal handler for 'server role' common s3-param: Merge a number of s4 parameters from lib/param to make this table common s3-param: fix indent on cups encrypt s3-param: Merge parameter varaibles with lib/param lib/param: Remove "ntptr providor" and hard-code in s4 spoolss server lib/param: Remove 'case insensitive filesystem' lib/param: Rename param_enums.c to param_table.c lib/param: Move all enum declarations to lib/param lib/param: Make lp_usershare_max_shares() a common parameter lib/param: Merge handling of security/domain master/domain logons/server role lib/param: Add handler overrides lib/param: Re-arrange TLS parameters into their own section lib/param: Rearrange AD DC options to make a merge with the source3 table easier lib/param: Merge DNS parameters with source3 param lib/param: Merge Winbind parameters from source3 into lib/param lib/param: Merge VFS and MSDFS parameters from source3 into lib/param waf: Update to newer upstream snapshot. lib/param: Merge "Miscellaneous Options" section from source3/param lib/param: Merge "EventLog Options" section from source3/param lib/param: Merge "Ldap Options" section from source3/param lib/param: Merge "Locking Options" section from source3/param lib/param: Merge "WINS Options" section from source3/param lib/param: Merge "Browse Options" section from source3/param lib/param: Merge "Logon Options" section from source3/param lib/param: Merge "Domain Options" section from source3/param lib/param: Merge "Filename Handling" section from source3/param s3-build: Make recursive waf build a developer build again (to build developer test facilities) lib/param: Merge "Printing Options" section from source3/param lib/param: Merge "Tuning Options" section from source3/param lib/param: Merge "Protocol Options" section from source3/param s3-param: Merge "log file" parameter with lib/param lib/param: Merge "Logging Options" section from source3/param lib/param: Merge "Security Options" section from source3/param lib/param: Merge in source3 parameters into parmeter table lib/param: Merge parameter tables into a common file param: Make socket_address common, Revert 611ef42053eb99f4c29d4efa86eaea9f1ca06286 docs: Mark "socket address" as deprecated lib/param: Remove unused "paranoid server security" lib/param: Mark lpcfg_cachedir and lpcfg_statedir as const char * lib/param: Remove use of lp{cfg,}_socket_address outside the NBT client and server lib/param: Rename "socket address" to "nbt client socket address" to clarify role s4-dbcheck: Add lastKnownParent when moving an object to lostAndFound s3-libsmbclient: Add missing talloc_stackframe() calls s4-repl: Use NULL for pointer test when checking for ldb_msg_new() failure s4-repl: Use ldb_dn_new() to create the rootDSE DN s4-librpc: Fix private context for dcerpc_connect_timeout_handler s4-dsdb: Provide a way to handle conflicts due to rename s4-dsdb: Provide a way to force incoming renames to take priority s4-dsdb: Change move to lostAndFound to use container in this partiion and add debugging s4-dsdb: Do not strip base components off DN before searching for NC root s4-dsdb: Fill in lastKnownParent when moving to lostAndFound s4-samba-tool ldapcmp: Add ridNextRID and rIDPreviousAllocationPool as per-DC attributes s4-samba-tool ldapcmp: Fix synopsis auth/kerberos: Do not do pointer arithmatic on a void * lib/ccan: Fix format string errors found by -Werror=format in ccan failtest lib/ntdb: Fix format string errors found by -Werror=format in ntdb tests lib/tdb: Fix format string errors found by -Werror=format in tdb tests s4-torture: Fix format string errors found by -Werror=format build: Add more -Werror flags now the tree is clean of these errors s3-utils: Add cast to fix error found by -Werror=format ldb: Add parameter to avoid NULL format string flagged by -Werror=format s4-dsdb: Request extended DN and show deleted when searching for a possible parent lib/ldb: Ensure rename target does not exist before deleting old record s4-dsdb: Handle rename conflicts in both directions s4-dsdb: Improve tracing in repl_meta_data s4-dsdb: Replace any existing lastKnownParent attribute during delete s4-repl: Add tests for add replication conflicts and use of LostAndFound WHATSNEW: prepare for 4.0 beta5 VERSION: Mark as the beta5 release Björn Jacke (7): s3:configure: add Darwin sendfile() test s3:waf: add Darwin sendfile() test s3: add Darwin sendfile support and merge with the FreeBSD code s3: use libreplace in pthreadpooltest to fix some builds s3/aio_fork: fix build on irix buildtools: use egrep when we need the "-f patternfile" option s3:vlp: fix build on OS X Christian Ambach (6): s3:smbstatus fix a compiler warning s3:smbstatus rename a function to make its purpose more clear s3:smbstatus don't check if process exists twice s3:smbstatus add --fast option docs-xml: document smbstatus --fast docs-xml: document smbstatus --notify Christof Schmitt (1): torture: Print SIDs as additional debug output in unix.whoami David Binderman (1): Fix bug 9065: source3/registry/regfio.c: bad call to memcpy Geza Gemes (1): s4-classicupgrade: Add unix attributes during upgrade Guenther Deschner (1): s3-winbind: Fix idmap initialization debug message. Günther Deschner (2): s3-autoconf: Fix the build. s3-pdb: remove unused variables. Jeremy Allison (14): Add debug message when SD hash doesn't match. Move source4/smbd/pidfile into lib/util in preparation for making it in common. Add debugs to functions. Add pidfile_unlink(). Make the s3 pidfile use the common code inside lib/util/pidfile.c Fix the configure build - add lib/util/pidfile.o into UTIL_OBJ. Move everything to use the common pidfile functions. Remove source3/lib/pidfile.c Fix problem found by Andrew Bartlett - correctly check encrypted flag. Fix debug print warning message. Fix compiler warning. Fix unused variable. Fix incorrect use of server as a talloc context. Fix compiler warning message. Remove unused variable. Jiri Popelka (1): Use ippGet/ippSet (accessors) for IPP API. Luk Claes (3): libcli/smb: introduce smb1.session for uid use s3:libsmb: use cli_state_{g,s}et_uid instead of smb1.uid directly libcli/smb: add smbXcli_tcon structure Rusty Russell (24): talloc: use a struct for pool headers. talloc: don't allow a talloc_pool inside a talloc_pool. talloc_stack: handle more than one talloc_stackframe_pool() talloc_stack: always include the location when creating a talloc_stackframe(). talloc_stack: report lazy freeing (panic if DEVELOPER). smbpasswd: always free frame. source3/client/client.c: fix stackframe leak. nt_printing_tdb_migrate(): fix stackframe leak. source3/winbindd/winbindd_util.c: fix stackframe leak lib/util/modules.c: fix stackframe leak. source3/modules/vfs_xattr_tdb.c: fix stackframe leak source3/rpc_server/svcctl/srv_svcctl_reg.c: fix stackframe leak source3/winbindd/idmap_tdb_common.c: fix stackframe leak source3/registry/reg_backend_db.c: fix stackframe leak source3/lib/smbconf/testsuite.c: fix stackframe leak source3/winbindd/winbindd_pam.c: fix stackframe leak source3/utils/net_conf.c: fix stackframe leak loadparm: make the source3/ lp_ functions take an explicit TALLOC_CTX *. talloc_stack: abort in developer me if no stackframe on talloc_tos() source3/torture/pdbtest: allocate talloc_stackframe() source3/passdb/py_passdb.c: don't steal from talloc_stackframe(). source3/passdb/py_passdb.c: wrap all calls in talloc_stackframe() source3/netapi: fix only caller which doesn't set up a talloc_stackframe() source4/torture: add talloc_stackframe() Sergey Urushkin (1): s4 rfc2307 gids mapping fix Stefan Metzmacher (82): s4:librpc/rpc/dcerpc_schannel: rework downgrade logic s4:librpc/rpc/dcerpc_schannel: just append NETLOGON_NEG_RODC_PASSTHROUGH as rodc s4:rpc_server/netlogon: implement netr_LogonGetCapabilities s4:rpc_server/netlogon: only return STRONG_KEYS if the client asked for it libcli/auth: add support for AES/HMAC-SHA256 schannel session key support libcli/auth: add support for AES/HMAC-SHA256 to the netlogon schannel sign/seal s4:librpc/rpc: add DCERPC_SCHANNEL_AES support s4:rpc_server/netlogon: add support for AES based netlogon schannel s3:rpc_server: add support for AES bases netlogon schannel s3:smbd: if a fsp has fsp->deferred_close, clients shouldn't be able to use it s3:smb2_tcon: reject access to shares mark as "smb encrypt = required" s3:test_smb2: copy the session_channel from the primary channel. libcli/smb: add SMB2_TRANSFORM macros libcli/smb: add SMB2_SESSION_FLAG_ENCRYPT_DATA lib/crypto: add aes_ccm_128 libcli/smb: construct the signing_key before forming the message libcli/smb: add smb2_signing_[en|e]crypt_pdu() libcli/smb: only pass the smb2 buffer to smb2cli_inbuf_parse_compound() libcli/smb: check the buffer length in smbXcli_negprot_dispatch_incoming() libcli/smb: copy the application_key in smb2cli_session_create_channel() libcli/smb: prepare [en|de]cryption_key for SMB3 libcli/smb: create 4 iovecs per request in smb2cli_inbuf_parse_compound() libcli/smb: parse the SMB2_TRANSFORM header and decrypt the SMB2 pdu libcli/smb: make use of SMB2_HDR_BODY as header size libcli/smb: maintain smb2.should_sign on smbXcli_req_state libcli/smb: increment nbt_len, when we have the fully created the SMB2 PDU libcli/smb: encrypt SMB2 traffic if nedded/desired. libcli/smb: set should_encrypt = true if we got SMB2_SESSION_FLAG_ENCRYPT_DATA s4:libcli/raw: setup a smbXcli_session for each smbcli_session libcli/smb: pass down smbXcli_session to smb1cli_req_create/send() and smb1cli_trans* s4:libcli/raw: fix SMBtconX response parsing s4:libcli/raw: parse extended SMBtconX responses s3:libsmb: make use of cli_state_[g|s]et_tid() s3:libsmb: use a smbXcli_tcon instead of uint16_t cli_state->smb1.tid s4:libcli/raw: setup a smbXcli_tcon for each smbcli_tree libcli/smb: pass down smbXcli_tcon to smb1cli_req_create/send() and smb1cli_trans* s4:libcli/smb2: setup a smbXcli_tcon for each smb2_tree s3:libsmb: setup a smbXcli_tcon for SMB2 libcli/smb: pass smbXcli_tcon to smb2cli_create*() libcli/smb: pass smbXcli_tcon to smb2cli_close*() libcli/smb: pass smbXcli_tcon to smb2cli_read*() libcli/smb: pass smbXcli_tcon to smb2cli_write*() libcli/smb: pass smbXcli_tcon to smb2cli_flush*() libcli/smb: pass smbXcli_tcon to smb2cli_set_info*() libcli/smb: pass smbXcli_tcon to smb2cli_query_info*() libcli/smb: pass smbXcli_tcon to smb2cli_query_directory*() libcli/smb: pass smbXcli_tcon to smb2cli_ioctl*() s3:torture/test_smb2: make a copy of smbXcli_tcon s3:smb2_server: simplify the talloc_pool handling for smbd_smb2_request s3:torture: replace shm_setup() with anonymous_shared_allocate() s3:torture: remove unused shm_setup() s4:torture: replace shm_setup() with anonymous_shared_allocate() s4:torture: remove unused shm_setup() s3:libsmb: remove cli_state->smb2.tid s3:libsmb: remove unused tcon specific elements from cli_state->smb2 libcli/smb: add smb2cli_tcon_capabilities() s4:torture/smb2: use smb2cli_tcon_capabilities() s4:torture/smb2: create temporary smbXcli_tcon/session structures instead of changing them s4:libcli/smb2: remove unused elements from smb2_tree libcli/smb: pass smbXcli_tcon to smb2cli_req_create/send() libcli/smb: there's no PID field in the SMB2/3 header anymore s4:libcli/smb2: remove unused variable s3:libsmb: remove unused cli_state->smb2.pid s4:libcli/smb2: remove unused smb2_session->pid libcli/smb: pass smbXcli_session to smb2cli_tcon_set_values() libcli/smb: setup tcon->smb2.should_encrypt in smb2cli_tcon_set_values() s3:smb2_ioctl: remove FSCTL_VALIDATE_NEGOTIATE_INFO_224 implementation s3:smb2_ioctl: allow clients to send padding at the end of FSCTL_VALIDATE_NEGOTIATE_INFO s3:smb2_ioctl: fix GUID_compare() check in FSCTL_VALIDATE_NEGOTIATE_INFO s3:libcli/smb: add SMB2_SESSION_FLAG_BINDING s3:smb2_sesssetup: reject SMB2_SESSION_FLAG_BINDING requests libcli/smb: introduce a smb2cli_session libcli/smb: add SMB2_HDR_CHANNEL_SEQUENCE libcli/smb: add basic session->smb2.channel_sequence handling s3:smbd: fix compiler warnings in notify_internal.c s3:smb2_negprot: return the current system time in the SMB2 NEGPROT response dfs_server_ad: return STATUS_NOT_FOUND if the client connects to an ip address dfs_server_ad: s/acct/aname as acct() is a function s3:dbwrap_ctdb: initialize db_record->db s3:smbd: move smbd_register_ips() next to release_ip() s3:smbd: use print_sockaddr() instead of client_socket_addr() s3:smbd: do a clean shutdown during release_ip() after CTDB_SRVID_RELEASE_IP Volker Lendecke (44): s3-linux-aio: Fix error handling libasys s3-vfs: async pwrite s3-vfs: async pread s3: Use SMB_VFS_PREAD_SEND in schedule_aio_read_and_X s3: Use SMB_VFS_PWRITE_SEND in schedule_aio_write_and_X s3: Use SMB_VFS_PREAD_SEND in schedule_smb2_aio_read s3: Use SMB_VFS_PWRITE_SEND in schedule_smb2_aio_write s3: Properly handle shutdown with the _send/_recv based aio s3: Remove the unused completion handling from aio.c s3:vfs_aio_pthread: Convert to libasys s3: Make smbd/aio.c not depend on aio.h anymore s3: Add vfs_aio_posix s3-aio_fork: Convert create_aio_child from NTSTATUS to errno s3-aio_fork: Convert get_idle_child from NTSTATUS to errno s3: Convert aio_fork to pread/pwrite_send/recv s3: Convert aio_linux to pread/pwrite_send/recv s3-vfs: Add pread_send/recv to vfs modules s3-vfs: Add pwrite_send/recv to vfs modules s3-aio: Remove unused VFS functions and more s3: Move the aio_pthread read/write functionality to vfs_default s3: Make us survive base-delaywrite with aio enabled s3-libasys: Add asys_fsync() implementation s3: Fix the build s3-vfs: async fsync s3: Add a _nosync version of smb2_write_complete s3-aio: Make the strict sync after write async s3: Add aio_fsync to the aio_posix module s3-aio-fork: make "read_cmd" an enum s3: Add aio_fsync to the aio_fork module s3: Add aio_fsync to the aio_linux module config: The AIO engine is indepent of HAVE_AIO now s3: Compile with pthreadpool by default s3: Slightly simplify reply_close() s3: Add tevent_wait_send/recv s3-smb1: Postpone close_file until all aio is handled s3-smb2: Postpone close_file until all aio is handled s3-aio: Panic if we try to close a fsp with outstanding aio requests s3: Make request_timed_out() static tevent: Refer to the correct header in testsuite.c s3: Fix Coverity ID 710827 Resource leak s3: Fix Coverity ID 710818 Resource leak s3: Fix Coverity ID 710803 Resource leak s3: Fix Coverity ID 710791 Resource leak ----------------------------------------------------------------------- -- Samba Shared Repository